CVE-2007-4271

Related Files

iDEFENSE Security Advisory 2007-08-16.2

Posted Aug 17, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 08.16.07 - Local exploitation of a directory traversal vulnerability in IBM Corp.'s DB2 Universal Database allows attackers to cause a denial of service (DoS) condition or elevate privileges to root. Some DB2 binaries that are installed setuid-root will save event information to a log file. When creating the full path to the destination file, an environment variable is concatenated with "/tmp/". Since there is no checking for path traversal strings, such as "../", within the environment variable, an attacker is able to create arbitrary files on the system. iDefense confirmed the existence of this vulnerability in version 9.1 Fix Pack 2 of IBM Corp.'s DB2 Universal Database installed on a Linux system. All prior versions, as well as builds for other UNIX-based operating systems, are suspected to be vulnerable.

tags | advisory, denial of service, arbitrary, local, root

systems | linux, unix

advisories | CVE-2007-4271

SHA-256 | 6f620eab6537c31509d20ac985ce18180b4e6d3c22825695c8acd36e676cfc76

Download | Favorite | View