CVE-2003-0898: IBM DB2 Universal Database

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.

Affected products

• IBM DB2 Universal Database: up to and including 8.0; version 7.1 only

Published 2003-11-17. Last modified 2026-06-16.