IBM DB2数据库db2dasrrm缓冲区溢出和文件创建漏洞

BUGTRAQ ID: 27870 CVECAN ID: CVE-2007-5758,CVE-2007-5664 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。...

CVE-2007-5758

CVE-2007-5758 describes a stack-based buffer overflow in the IBM DB2 Universal Database component db2dasrrm (DAS) that can be triggered by a long DASPROF environment variable. Affected are DB2 UDB 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16. Local users could execute arb...