[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-4273

Date: (C)2007-08-18   (M)2017-07-31
 
CVSS Score: 4.6Access Vector: LOCAL
Exploitability Subscore: 3.9Access Complexity: LOW
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).

Reference:
SECTRACK-1018581
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=581
http://www.attrition.org/pipermail/vim/2007-August/001765.html
BID-25339
SECUNIA-26471
ADV-2007-2912
IY98011
IY98101
http://www.attrition.org/pipermail/vim/2007-August/001765.html
db2-message-file-format-string(36106)
http://www-1.ibm.com/support/docview.wss?uid=swg21255352
http://www-1.ibm.com/support/docview.wss?uid=swg21255607

CWE    1
CWE-134

© 2013 SecPod Technologies