CVE-2003-1051 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.9%	–	–
2022-04-03	–	–	1.9%	–	–
2022-04-24	–	–	1.9%	–	–
2022-09-11	–	–	1.9%	–	–
2023-03-12	–	–	–	0.04%	–
2024-06-02	–	–	–	0.04%	–
2025-01-19	–	–	–	0.04%	–
2025-03-18	–	–	–	–	0.05%
2025-04-15	–	–	–	–	0.05%
2025-04-16	–	–	–	–	0.05%
2025-04-16	–	–	–	–	0.05,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	55%
2022-04-03	75%
2022-04-24	76%
2022-09-11	77%
2023-03-12	–
2024-06-02	–
2025-01-19	–
2025-03-18	13%
2025-04-15	15%
2025-04-16	16%
2025-04-16	16%

source: https://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and db2stop programs. These binaries are typically installed setuid. As a result, a malicious local user may be capable of gaining elevate privileges. [db2inst1@RiotStarter adm]$ ./db2govd validate garbage %x GOV1023N Unable to open configuration file "bfffed88". RC = "-2045837302". [db2inst1@RiotStarter adm]$ ./db2govd validate garbage %n%n%n Segmentation fault [db2inst1@RiotStarter adm]$ ./db2govd stop a %x db2govd: GOV1005N No governor for database "A" on node "bfffe188" is running, or it is already being stopped. [db2inst1@RiotStarter adm]$ ./db2govd stop a %n%n%n Segmentation fault [db2inst1@RiotStarter adm]$ ./db2govd stop %x b db2govd: GOV1005N No governor for database "BFFFD788" on node "b" is running, or it is already being stopped. [db2inst1@RiotStarter adm]$ ./db2govd stop %n%n%n b Segmentation fault

source: https://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and db2stop programs. These binaries are typically installed setuid. As a result, a malicious local user may be capable of gaining elevate privileges. [kf@RiotStarter adm]$ ./db2start %x SQL2032N The "bffff270" parameter is not valid. [kf@RiotStarter adm]$ ./db2start %n%n Segmentation fault [kf@RiotStarter adm]$ ./db2stop %x SQL2032N The "bffff6f0" parameter is not valid.

source: https://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and db2stop programs. These binaries are typically installed setuid. As a result, a malicious local user may be capable of gaining elevate privileges. [kf@RiotStarter adm]$ ./db2stop %n%n Segmentation fault