CVE-2007-4271: Path Traversal
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink following.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4271?
CVE-2007-4271 is considered to have a medium severity level due to its potential for local file manipulation.
How do I fix CVE-2007-4271?
To fix CVE-2007-4271, upgrade to IBM DB2 UDB 8 Fixpak 15 or DB2 UDB 9.1 Fixpak 3 or later.
Who is affected by CVE-2007-4271?
CVE-2007-4271 affects local users of IBM DB2 UDB version 8 before Fixpak 15 and version 9.1 before Fixpak 3.
What type of vulnerability is CVE-2007-4271?
CVE-2007-4271 is a directory traversal vulnerability allowing local users to create arbitrary files.
Can CVE-2007-4271 be exploited remotely?
CVE-2007-4271 cannot be exploited remotely as it is limited to local users on the affected system.