CVE-2004-1372

Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.

• http://marc.info/?l=bugtraq&m=110382462924162&w=2
• http://marc.info/?l=bugtraq&m=110382730431065&w=2
• http://www.ngssoftware.com/advisories/db223122004K.txtPatch, Vendor Advisory
• http://www.ngssoftware.com/advisories/db223122004L.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11089Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18663
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18682
• http://marc.info/?l=bugtraq&m=110382462924162&w=2
• http://marc.info/?l=bugtraq&m=110382730431065&w=2
• http://www.ngssoftware.com/advisories/db223122004K.txtPatch, Vendor Advisory
• http://www.ngssoftware.com/advisories/db223122004L.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/11089Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18663
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18682

Published

Sep 1, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1366Oracle 10g Database Server stores the password for the SYSMA…
• CVE-2004-1367Oracle 10g Database Server, when installed with a password t…
• CVE-2004-1368ISQL*Plus in Oracle 10g Application Server allows remote att…
• CVE-2004-1369The TNS Listener in Oracle 10g allows remote attackers to ca…
• CVE-2004-1370Multiple SQL injection vulnerabilities in PL/SQL procedures …
• CVE-2004-1371Stack-based buffer overflow in Oracle 9i and 10g allows remo…
• CVE-2004-1373Format string vulnerability in SHOUTcast 1.9.4 allows remote…
• CVE-2004-1374Multiple buffer overflows in NetBSD kernel may allow local u…
• CVE-2004-1375Unknown vulnerability in System Administration Manager (SAM)…
• CVE-2004-1376Directory traversal vulnerability in Microsoft Internet Expl…
• CVE-2004-1377The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.…
• CVE-2004-1378The expat XML parser code, as used in the open source Jabber…