[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97389

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-4271

Date: (C)2007-08-18   (M)2015-12-16
 
CVSS Score: 2.1Access Vector: LOCAL
Exploitability Subscore: 3.9Access Complexity: LOW
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE











Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink following.

Reference:
SECTRACK-1018581
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=579
http://www.attrition.org/pipermail/vim/2007-August/001765.html
BID-25339
SECUNIA-26471
ADV-2007-2912
IY98210
IY99261
http://www.attrition.org/pipermail/vim/2007-August/001765.html
http://www-1.ibm.com/support/docview.wss?uid=swg21255352
http://www-1.ibm.com/support/docview.wss?uid=swg21255607

CWE    1
CWE-22

© 2013 SecPod Technologies