Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2007-5757

Disclosure Date: February 13, 2008 (last updated October 04, 2023)
Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database (UDB) 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as CVE-2008-0697.
0
0
Attacker Value
Unknown

CVE-2007-4423

Disclosure Date: August 18, 2007 (last updated October 04, 2023)
Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.
0
0
Attacker Value
Unknown

CVE-2003-1052

Disclosure Date: September 28, 2004 (last updated February 22, 2025)
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
0
0