Db2 Security Vulnerabilities and Issues — Db2 CVE List

Lucene search

IbmDb2

3 matches found

CVE•added 2007/02/21 11:28 a.m.•46 views

CVE-2007-1027

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.

4.4CVSS6.2AI score0.00046EPSS

CVE•added 2007/02/23 10:28 p.m.•42 views

CVE-2007-1087

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

7.2CVSS7.3AI score0.00076EPSS

CVE•added 2007/02/23 10:28 p.m.•38 views

CVE-2007-1088

Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.

7.2CVSS7.5AI score0.00076EPSS