PT-2007-5466 · Ibm · Ibm Db2 Udb

Published 2007-08-18 · Updated 2017-07-29 · CVE-2007-4275

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB versions 8.0 through 8.0 before Fixpak 15 IBM DB2 UDB versions 9.1 through 9.1 before Fixpak 3

Description The issue concerns untrusted search path vulnerabilities that allow local users to gain privileges. This is related to certain vectors, including DB2 instance or FMP startup on Linux and Solaris, execution of executables while running as root on non-Windows systems (such as AIX), and unspecified vectors involving db2licm and db2pd.

Recommendations For IBM DB2 UDB versions 8.0 through 8.0 before Fixpak 15, apply Fixpak 15 to resolve the issue. For IBM DB2 UDB versions 9.1 through 9.1 before Fixpak 3, apply Fixpak 3 to resolve the issue.

Fix

Related Identifiers

CVE-2007-4275

Affected Products

Ibm Db2 Udb

References · 17

• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ02067 · Vendor Advisory
• http://secunia.com/advisories/26471 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY97922 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21255607 · Patch
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ01923 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY98176 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY97936 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4275 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg1IY98206 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21255352 · Patch
• http://attrition.org/pipermail/vim/2007-August/001765.html · Note
• http://securityfocus.com/bid/25339 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36064 · Note
• http://vupen.com/english/advisories/2007/2912 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36062 · Note