CVE

Id
27630  
CVE No.
CVE-2007-4273  
Status
Candidate  
Description
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284357 27630 CVE-2007-4273 IDEFENSE:20070816 IBM DB2 Universal Database Directory Creation Vulnerability  View
284358 27630 CVE-2007-4273 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=581  View
284359 27630 CVE-2007-4273 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255352  View
284360 27630 CVE-2007-4273 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21255607  View
284361 27630 CVE-2007-4273 AIXAPAR:IY98011  View
284362 27630 CVE-2007-4273 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY98011  View
284363 27630 CVE-2007-4273 AIXAPAR:IY98101  View
284364 27630 CVE-2007-4273 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1IY98101  View
284365 27630 CVE-2007-4273 VIM:20070818 Recent DB2 Vulnerabilities  View
284366 27630 CVE-2007-4273 URL:http://www.attrition.org/pipermail/vim/2007-August/001765.html  View
284367 27630 CVE-2007-4273 BID:25339  View
284368 27630 CVE-2007-4273 URL:http://www.securityfocus.com/bid/25339  View
284369 27630 CVE-2007-4273 VUPEN:ADV-2007-2912  View
284370 27630 CVE-2007-4273 URL:http://www.vupen.com/english/advisories/2007/2912  View
284371 27630 CVE-2007-4273 SECTRACK:1018581  View
284372 27630 CVE-2007-4273 URL:http://securitytracker.com/id?1018581  View
284373 27630 CVE-2007-4273 SECUNIA:26471  View
284374 27630 CVE-2007-4273 URL:http://secunia.com/advisories/26471  View
284375 27630 CVE-2007-4273 XF:db2-message-file-format-string(36106)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55567 JVNDB-2007-004259 IBM DB2 UDB における権限を取得される脆弱性 IBM DB2 UDB は、検索パスの不備があるため、権限を取得される脆弱性が存在します。 CVE-2007-4275 27630 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004259.html  View