Code injection

2019-08-2615:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum_debug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This results in arbitrary code being executed with root authority. IBM X-Force ID: 163489.

CPENameOperatorVersion
db2_high_performance_unload_loadeq6.1
db2_high_performance_unload_loadeq6.1.0.1 if2
db2_high_performance_unload_loadeq6.1.0.1 if1
db2_high_performance_unload_loadeq6.1.0.1
db2_high_performance_unload_loadeq6.1.0.2
db2_high_performance_unload_loadeq6.1.0.2 if1

Name	Operator	Version
db2_high_performance_unload_load	eq	6.1
db2_high_performance_unload_load	eq	6.1.0.1 if2
db2_high_performance_unload_load	eq	6.1.0.1 if1
db2_high_performance_unload_load	eq	6.1.0.1
db2_high_performance_unload_load	eq	6.1.0.2
db2_high_performance_unload_load	eq	6.1.0.2 if1