Format string

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the 1 OSSEMEMDBG or 2 TRCLOGFILE environment variable in db2licd...

CVE-2007-4270

CVE-2007-4270 affects IBM DB2 Universal Database (UDB) 8 before Fixpak 15 and 9.1 before Fixpak 3. Local users can elevate to root via a race condition involving symbolic links when handling privileged files. The issue is documented in multiple sources, including NVD and iDefense advisories, with...

CVE-2007-4275

IBM DB2 UDB 8.x (Fixpak 15) and 9.1 (Fixpak 3) have multiple local privilege-escalation vulnerabilities due to untrusted search paths and environment-based file/binary loading. Exploitable vectors include startup of the DB2 instance or FMP on Linux/Solaris, execution of executables while running ...

CVE-2007-4270

Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files...

CVE-2007-4273

CVE-2007-4273 affects IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3. Local attackers could create arbitrary directories and execute arbitrary code by supplying a crafted localized message file that enables a format-string attack, potentially involving the OSSEMEMDBG or TRC_LOG_FILE envir...

CVE-2007-4417

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 are affected by CVE-2007-4417 due to improper revocation of privileges on methods. This vulnerability lets remote authenticated users execute a method after privileges have been revoked, until the routine auth cache is flushed. The issue conc...

CVE-2007-4423

CVE-2007-4423 : A stack-based buffer overflow in IBM DB2 UDB 9.1 (prior to Fixpak 3) occurs in the AUTH_LIST_GROUPS_FOR_AUTHID function. This vulnerability allows denial of service and may enable arbitrary code execution via a long argument. Affected product/version: IBM DB2 UDB 9.1 before Fixpak...

CVE-2007-4271

Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. dot dot in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink...

CVE-2007-4418

IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details...

CVE-2007-4418

IBM DB2 UDB 8 prior to Fixpak 15 is reported to fail an authorization check, allowing remote authenticated users with a specific SELECT privilege to trigger an unknown impact via unspecified vectors. The entry notes a possible relation to CVE-2007-1089, but details are unclear. The provided conne...

CVE-2007-4417

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed...

CVE-2007-4272

CVE-2007-4272 involves multiple local vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3. The issues allow local users to create arbitrary files via several vectors: (1) vectors where an attacker’s umask is honored, (2) using /etc/ld.so.preload, (3) specific cron data file ...

CVE-2007-4276

Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows attackers to execute arbitrary code via a long DASPROF and possibly other environment variables, which are copied into the buildDasPaths buffer...

CVE-2007-4273

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the 1 OSSEMEMDBG or 2 TRCLOGFILE environment variable in db2licd...

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

Design/Logic Flaw

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14) and DB2 9 before Fix Pack 2 on UNIX allow the fenced user to access certain unauthorized directories. Root cause: insufficient access restriction for the fenced process. Impact, as stated: unauthorized directory access (no broader impact detailed)....

CVE-2007-1228

IBM DB2 UDB 8.2 before Fixpak 7 aka fixpack 14, and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories...

CVE-2007-1089

IBM DB2 Universal Database UDB 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and DELETE SQL commands via unknown vectors...

CVE-2007-1089

CVE-2007-1089 affects IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1. The vulnerability arises when local users with table SELECT privileges can execute unauthorized UPDATE and DELETE SQL commands via unknown vectors. Affected component appears to be the database access/authorization pat...