VulnerabilityModified
CVE-2007-5664
db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.
MEDIUM 6.9EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-59
- Affected
- ibm/db2 universal database
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688
- http://secunia.com/advisories/29784Patch, Vendor Advisory
- http://www.securityfocus.com/bid/27870Patch
- http://www.securitytracker.com/id?1019852
- http://www.vupen.com/english/advisories/2008/1237/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41848
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=688
- http://secunia.com/advisories/29784Patch, Vendor Advisory
- http://www.securityfocus.com/bid/27870Patch
- http://www.securitytracker.com/id?1019852
- http://www.vupen.com/english/advisories/2008/1237/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41848
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.