CVE-2007-1086: High severity HP HP-UX vulnerability
Published Feb 23, 2007
·Updated
Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."
Affected Software
34 affected components
HP HP-UX
IBM AIX
Linux Linux kernel=2.6.18.0
Linux Linux kernel=2.6.18.1
Linux Linux kernel=2.6.18.2
Linux Linux kernel=2.6.18.3
Linux Linux kernel=2.6.18.4
Linux Linux kernel=2.6.18.5
Linux Linux kernel=2.6.18.6
Linux Linux kernel=2.6.18.7
Linux Linux kernel=2.6.19
Linux Linux kernel=2.6.19.1
Linux Linux kernel=2.6.19.2
Linux Linux kernel=2.6.19.3
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.20
Linux Linux kernel=2.6.20.1
Microsoft Windows XP
Sun Solaris
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1.4
IBM DB2 Universal Database=8.1.5
IBM DB2 Universal Database=8.1.6
IBM DB2 Universal Database=8.1.6c
IBM DB2 Universal Database=8.1.7
IBM DB2 Universal Database=8.1.7b
IBM DB2 Universal Database=8.1.8
IBM DB2 Universal Database=8.1.8a
IBM DB2 Universal Database=8.1.9
IBM DB2 Universal Database=8.1.9a
IBM DB2 Universal Database=8.10
IBM DB2 Universal Database=8.12
IBM DB2 Universal Database=9.1
Remediation
Patch Available
Event History
Feb 23, 2007
CVE Published
10:28 PM
Data Sourced
10:28 PM
DescriptionWeaknessAffected Software
Feb 24, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1086?
The severity of CVE-2007-1086 is considered medium due to its potential for local user exploitation.
2
How do I fix CVE-2007-1086?
To fix CVE-2007-1086, upgrade IBM DB2 to version 8.1 FixPak 15 or 9.1 Fix Pack 2 or later.
3
What are the affected versions for CVE-2007-1086?
CVE-2007-1086 affects IBM DB2 versions prior to 8.1 FixPak 15 and 9.1 before Fix Pack 2.
4
Who is affected by CVE-2007-1086?
Local users of IBM DB2 versions prior to the mentioned fixes are mainly affected by CVE-2007-1086.
5
What type of vulnerability is CVE-2007-1086?
CVE-2007-1086 is a local privilege escalation vulnerability due to unsafe file access in IBM DB2.