EUVD-2008-1964

Malware in sbrugna...

CVE-2008-2154: Undefined Security Weakness

IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 provides an INSTALLJAR aka sqlj.installjar procedure, which allows remote authenticated users to create or overwrite arbitrary files via unspecified calls...