CVE-2004-0795

CVE-2004-0795 describes a privilege escalation vulnerability in IBM DB2 Universal Database version 8.1. A local attacker can exploit the DB2 remote command server (DB2RCMD.EXE) by manipulating the DB2REMOTECMD named pipe, causing it to execute db2rcmdc.exe as the db2admin administrator and thereby gain elevated privileges. This vulnerability has a CVSS score of 7.2, indicating high severity with complete confidentiality, integrity, and availability impacts, and requires local access with low attack complexity. While not listed on the KEV catalog, a Metasploit module exists for exploitation, though there is no evidence of active exploitation or significant community discussion.