CVE-2007-1088: Buffer Overflow
Published Feb 23, 2007
·Updated
Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.
Affected Software
20 affected components
IBM DB2=8.0
IBM DB2=8.0-fp13
IBM DB2=8.0-fp14
IBM DB2=8.0-fp8
IBM DB2=8.0-fp9
IBM DB2=8.1
IBM DB2=8.1-fp13
IBM DB2=8.1-fp14
IBM DB2=8.1.4
IBM DB2=8.1.5
IBM DB2=8.1.6
IBM DB2=8.1.6c
IBM DB2=8.1.7
IBM DB2=8.1.7b
IBM DB2=8.1.8
IBM DB2=8.1.8a
IBM DB2=8.1.9
IBM DB2=8.1.9a
IBM DB2=9.1
IBM DB2=9.1-fp1
Remediation
Patch Available
Patch Available
Event History
Feb 23, 2007
CVE Published
10:28 PM
Feb 24, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1088?
CVE-2007-1088 is classified as a critical severity vulnerability due to its potential to allow arbitrary code execution by local users.
2
How do I fix CVE-2007-1088?
To fix CVE-2007-1088, upgrade to IBM DB2 version 8.1 FixPak 15 or 9.1 Fix Pack 2 or later.
3
What versions of IBM DB2 are affected by CVE-2007-1088?
IBM DB2 versions 8.0, 8.1 up to FixPak 14, and 9.1 before Fix Pack 2 are affected by CVE-2007-1088.
4
Who can exploit CVE-2007-1088?
CVE-2007-1088 can be exploited by local users with access to set environment variables.
5
What are the consequences of exploiting CVE-2007-1088?
Exploiting CVE-2007-1088 can lead to the execution of arbitrary code on the vulnerable system, compromising its integrity.