# CVEs published 2004-08-20

6 CVEs were published on August 20, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1583](https://cve.now/CVE-2002-1583.md): Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a lon (no CVSS)
- [CVE-2003-1049](https://cve.now/CVE-2003-1049.md): IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to m (no CVSS)
- [CVE-2003-1050](https://cve.now/CVE-2003-1050.md): Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments (no CVSS)
- [CVE-2003-1051](https://cve.now/CVE-2003-1051.md): Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command (no CVSS)
- [CVE-2003-1052](https://cve.now/CVE-2003-1052.md): IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs. (no CVSS)
- [CVE-2004-0795](https://cve.now/CVE-2004-0795.md): DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gai (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.