Description
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.
Unscored
CVE-2007-1027
EUVD-2007-1024GHSA-737q-974q-j2p4
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink …
Published Feb 21, 2007 · Updated Aug 7, 2024 · Assigned by mitre