CVE-2007-5664

Related Files

iDEFENSE Security Advisory 2008-04-09.4

Posted Apr 16, 2008

Authored by iDefense Labs, Joshua J. Drake | Site idefense.com

iDefense Security Advisory 04.09.08 - Local exploitation of a file creation vulnerability in the Administration Server of IBM Corp.'s DB2 Universal Database allows attackers to elevate privileges to root. This vulnerability exists due to unsafe file access from within the db2dasrrm program. When a user starts the DAS, the "db2dasrrm" process is started with root privileges. As part of the initialization, the "dasRecoveryIndex", "dasRecoveryIndex.tmp", ".dasRecoveryIndex.lock", and "dasRecoveryIndex.cor" files are created with root privileges. By removing and re-creating these files as symbolic links, an attacker can create arbitrary files as root. iDefense has confirmed the existence of this vulnerability in IBM Corp.'s DB2 Universal Database 9.1 release with Fix Pack 3 installed on Linux. Other versions are also suspected to be vulnerable.

tags | advisory, arbitrary, local, root

systems | linux

advisories | CVE-2007-5664

SHA-256 | dd5a634ae18370241c785ef50887abc8490a642fa48ef842bac9544bbb16e8e9

Download | Favorite | View