Lucene search

MitreCVE-2007-5664

HistoryApr 16, 2008 - 6:05 p.m.

CVE-2007-5664

2008-04-1618:05:00

CWE-59

mitre

web.nvd.nist.gov

ibm

db2

universal database

vulnerability

fix pack 1

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.

Affected configurations

Nvd

Node

ibmdb2_universal_databaseMatch8

ibmdb2_universal_databaseMatch9.1

ibmdb2_universal_databaseMatch9.5

VendorProductVersionCPE
ibmdb2_universal_database8cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*
ibmdb2_universal_database9.1cpe:2.3:a:ibm:db2_universal_database:9.1:*:*:*:*:*:*:*
ibmdb2_universal_database9.5cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	8	cpe:2.3:a:ibm:db2_universal_database:8:::::::*
ibm	db2_universal_database	9.1	cpe:2.3:a:ibm:db2_universal_database:9.1:::::::*
ibm	db2_universal_database	9.5	cpe:2.3:a:ibm:db2_universal_database:9.5:::::::*

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=688

secunia.com/advisories/29784

www.securityfocus.com/bid/27870

www.securitytracker.com/id?1019852

www.vupen.com/english/advisories/2008/1237/references

exchange.xforce.ibmcloud.com/vulnerabilities/41848

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2007-5664