PT-2019-17087 · Ibm+1 · Ibm Db2 High Performance Unload+1

Published 2019-08-26 · Updated 2022-12-02 · CVE-2019-4447

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2

Description The issue concerns a setuid root binary db2hpum debug that trusts the PATH environment variable. A low-privileged user can execute arbitrary commands as root by altering the PATH variable to point to a user-controlled location. When a crash is induced, a trojan gdb command is executed.

Recommendations For IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2, consider restricting the PATH environment variable to prevent it from being altered by low-privileged users. As a temporary workaround, consider disabling the db2hpum debug binary until a patch is available.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-4447

Affected Products

Ibm Db2 High Performance Unload

Gdb

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/163488 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10964592 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4447 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4447 · Security Note