CVE-2007-4272: Low severity IBM DB2 Universal Database vulnerability
Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to create arbitrary files via (1) unspecified vectors where an attacker's umask is honored, (2) /etc/ld.so.preload, (3) certain "cron data file locations", and other unspecified vectors possibly involving the (4) OSSEMEMDBG or (5) TRCLOGFILE environment variable in db2licd (db2licm).
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4272?
CVE-2007-4272 is considered a moderate severity vulnerability due to the potential for local users to exploit it.
How do I fix CVE-2007-4272?
To fix CVE-2007-4272, upgrade IBM DB2 UDB to version 8 Fixpak 15 or higher, or version 9.1 Fixpak 3 or higher.
Who is affected by CVE-2007-4272?
CVE-2007-4272 affects local users of IBM DB2 UDB versions 8.0 before Fixpak 15 and 9.1 before Fixpak 3.
What are the symptoms of CVE-2007-4272?
Symptoms of CVE-2007-4272 include unexpected file creation or modification by local users on affected DB2 installations.
Can CVE-2007-4272 be exploited remotely?
CVE-2007-4272 cannot be exploited remotely as it requires local user access to the affected system.