CVE

Id
27627  
CVE No.
CVE-2007-4270  
Status
Candidate  
Description
Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284300 27627 CVE-2007-4270 IDEFENSE:20070816 IBM DB2 Universal Database Multiple Race Condition Vulnerabilities  View
284301 27627 CVE-2007-4270 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=578  View
284302 27627 CVE-2007-4270 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255352  View
284303 27627 CVE-2007-4270 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255607  View
284304 27627 CVE-2007-4270 AIXAPAR:IY98210  View
284305 27627 CVE-2007-4270 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY98210  View
284306 27627 CVE-2007-4270 AIXAPAR:IY99261  View
284307 27627 CVE-2007-4270 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY99261  View
284308 27627 CVE-2007-4270 VIM:20070818 Recent DB2 Vulnerabilities  View
284309 27627 CVE-2007-4270 URL:http://www.attrition.org/pipermail/vim/2007-August/001765.html  View
284310 27627 CVE-2007-4270 BID:25339  View
284311 27627 CVE-2007-4270 URL:http://www.securityfocus.com/bid/25339  View
284312 27627 CVE-2007-4270 VUPEN:ADV-2007-2912  View
284313 27627 CVE-2007-4270 URL:http://www.vupen.com/english/advisories/2007/2912  View
284314 27627 CVE-2007-4270 SECTRACK:1018581  View
284315 27627 CVE-2007-4270 URL:http://securitytracker.com/id?1018581  View
284316 27627 CVE-2007-4270 SECUNIA:26471  View
284317 27627 CVE-2007-4270 URL:http://secunia.com/advisories/26471  View
284318 27627 CVE-2007-4270 XF:db2-binaries-symlink(36069)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55565 JVNDB-2007-004257 IBM DB2 UDB における任意のファイルを作成される脆弱性 IBM DB2 UDB には、任意のファイルを作成される脆弱性が存在します。 CVE-2007-4272 27627 1.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004257.html  View