Lucene search

MitreCVE-2007-4270

HistoryAug 18, 2007 - 9:17 p.m.

CVE-2007-4270

2007-08-1821:17:00

mitre

web.nvd.nist.gov

ibm

db2

udb

symlink attack

vulnerability

root privileges

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.2%

JSON

Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.

Affected configurations

Nvd

Node

ibmdb2_universal_databaseRange≤8.0fp14

ibmdb2_universal_databaseRange≤9.1fp2

VendorProductVersionCPE
ibmdb2_universal_database*cpe:2.3:a:ibm:db2_universal_database:*:fp14:*:*:*:*:*:*
ibmdb2_universal_database*cpe:2.3:a:ibm:db2_universal_database:*:*:fp2:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	*	cpe:2.3:a:ibm:db2_universal_database::fp14::::::*
ibm	db2_universal_database	*	cpe:2.3:a:ibm:db2_universal_database:::fp2:::::*

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=578

secunia.com/advisories/26471

securitytracker.com/id?1018581

www-1.ibm.com/support/docview.wss?uid=swg1IY98210

www-1.ibm.com/support/docview.wss?uid=swg1IY99261

www-1.ibm.com/support/docview.wss?uid=swg21255352

www-1.ibm.com/support/docview.wss?uid=swg21255607

www.attrition.org/pipermail/vim/2007-August/001765.html

www.securityfocus.com/bid/25339

www.vupen.com/english/advisories/2007/2912

exchange.xforce.ibmcloud.com/vulnerabilities/36069

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2007-4270