Unscored CVE-2007-1088 EUVD-2007-1085GHSA-9vg5-4h78-q3c4

Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via …

Published Feb 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.

References

20070818 Recent DB2 Vulnerabilities mailing-list
IY94833 vendor-advisory
db2-variable-bo(32652) vdb-entry
40971 vdb-entry
20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities third-party-advisory
22677 vdb-entry