Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1438)

Summary Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege. Vulnerability Details CVEID: CVE-2017-1438 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. CVSS...

CVE-2017-1438

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057...

CVE-2017-1438

CVE-2017-1438 is an IBM DB2 LUW local privilege-escalation vulnerability. Reports indicate a local user with DB2 instance owner privileges could obtain root access on DB2 LUW servers (versions 9.7, 10.1, 10.5, 11.1; includes DB2 Connect Server). Public details describe the underlying issue as a p...