CVE-2007-1086

 

Published at: - 23-02-2007 11:28

Last modified: - 26-09-2022 12:26

Total changes: - 2

Description

Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• 20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities-Patch
• IY94833-
• 22677-Patch
• 20070818 Recent DB2 Vulnerabilities-
• 40969-
• db2-setuid-privilege-escalation(32650)-

 

Keywords

NVD

 

CVE-2007-1086

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures