Description
Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."
References
- 20070818 Recent DB2 Vulnerabilities mailing-list
- IY94833 vendor-advisory
- db2-setuid-privilege-escalation(32650) vdb-entry
- 20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities third-party-advisory
- 22677 vdb-entry
- 40969 vdb-entry