CVE-2011-4061: Medium severity ibm db2 universal database vulnerability
Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4061?
CVE-2011-4061 has been classified with high severity due to the potential for privilege escalation.
How do I fix CVE-2011-4061?
To fix CVE-2011-4061, update IBM DB2 Express Edition to a patched version that addresses the untrusted search path vulnerabilities.
Who is affected by CVE-2011-4061?
CVE-2011-4061 affects local users of IBM DB2 Express Edition 9.7 and IBM Tivoli Monitoring for Databases.
What kind of attacks can exploit CVE-2011-4061?
CVE-2011-4061 can be exploited through the use of a Trojan horse library placed in the current working directory.
Is there a workaround for CVE-2011-4061?
As a workaround for CVE-2011-4061, ensure that the current working directory is secured and does not include untrusted files.