CVE-2007-4272

2007-08-1821:17:00

[email protected]

web.nvd.nist.gov

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker’s umask is honored, (2) /etc/ld.so.preload, (3) certain “cron data file locations”, and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRC_LOG_FILE environment variable in db2licd (db2licm).

Affected configurations

Nvd

Node

ibmdb2_universal_databaseRange≤8.0fp14

ibmdb2_universal_databaseRange≤9.1fp2

VendorProductVersionCPE
ibmdb2_universal_database*cpe:2.3:a:ibm:db2_universal_database:*:fp14:*:*:*:*:*:*
ibmdb2_universal_database*cpe:2.3:a:ibm:db2_universal_database:*:*:fp2:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2_universal_database	*	cpe:2.3:a:ibm:db2_universal_database::fp14::::::*
ibm	db2_universal_database	*	cpe:2.3:a:ibm:db2_universal_database:::fp2:::::*