Unscored CVE-2007-1087 EUVD-2007-1084GHSA-v93h-jxx8-f2rh

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to e…

Published Feb 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

References

40970 vdb-entry
20070818 Recent DB2 Vulnerabilities mailing-list
IY94833 vendor-advisory
db2-bss-bo(32651) vdb-entry
20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities third-party-advisory
22677 vdb-entry