Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4061
HistoryOct 18, 2011 - 12:00 a.m.

CVE-2011-4061

2011-10-1800:00:00
ubuntu.com
ubuntu.com
23

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

25.6%

Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2)
kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli
Monitoring for Databases: DB2 Agent, allow local users to gain privileges
via a Trojan horse libkbb.so in the current working directory, related to
the DT_RPATH ELF header.

Notes

Author Note
tyhicks Fixed in 9.7 FP6

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

25.6%