Unscored CVE-2007-5664 EUVD-2007-5636GHSA-5r7f-6hmm-m99p

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before …

Published Apr 16, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.

References

20080415 IBM DB2 Universal Database Administration Server File Creation Vulnerability third-party-advisory
1019852 vdb-entry
29784 third-party-advisory
ADV-2008-1237 vdb-entry
27870 vdb-entry
ibm-db2-db2dasrrm-symlink(41848) vdb-entry