Unscored CVE-2007-5758 EUVD-2007-5728GHSA-47q4-h3fv-9577

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 be…

Published Apr 16, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.

References

ibm-db2-db2dasrrm-dasprof-bo(41847) vdb-entry
1019853 vdb-entry
29784 third-party-advisory
ADV-2008-1237 vdb-entry
27870 vdb-entry
20080415 IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability third-party-advisory