Description
Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.
References
- 20110629 Breaking the links: Exploiting the linker mailing-list
- http://www.nth-dimension.org.uk/downloads.php?id=83
- 51181 vdb-entry
- 48514 vdb-entry
- http://www.nth-dimension.org.uk/downloads.php?id=77
- oval:org.mitre.oval:def:14063 vdb-entry signature
- 8476 third-party-advisory