CVE-2004-0795

high

Description

DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15420

http://www.securityfocus.com/bid/9821

http://www.nextgenss.com/advisories/db2rmtcmd.txt

http://www-1.ibm.com/support/docview.wss?uid=swg1IY53894

http://marc.info/?l=bugtraq&m=107885081414173&w=2

Details

Source: Mitre, NVD

Published: 2004-10-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H