NVD

Id
10599  
Name
CVE-2011-4061  
Description
Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-10-17  
Modified Date
2012-02-13  
Seq
2011-4061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59907 10599 CVE-2011-4061 oval:org.mitre.oval:def:14063  View
59908 10599 CVE-2011-4061 8476  View
59909 10599 CVE-2011-4061 http://www.nth-dimension.org.uk/downloads.php?id=77  View
59910 10599 CVE-2011-4061 http://www.nth-dimension.org.uk/downloads.php?id=83  View
59911 10599 CVE-2011-4061 20110629 Breaking the links: Exploiting the linker  View
59912 10599 CVE-2011-4061 48514  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32334 JVNDB-2011-002574 IBM DB2 Express Edition の FreeBSD の db2rspgn における権限を取得される脆弱性 IBM Tivoli Monitoring for Databases: DB2 Agent で使用される DB2 Express Edition の db2rspgn および kbbacf1 には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2011-4061 51968 CVE-2011-4061 10599 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002574.html 2011-10-18 2011-10-27 View