CVE-2007-1086

3 documents3 sources
Severity
7.2HIGH
EPSS
0.1%
top 79.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2 Universal Database
Timeline
PublishedFeb 23
Latest updateMay 1

Description

Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via unspecified environment variables related to "unsafe file access."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/db2_universal_database15 versions+14

Patches

Patch: labs.idefense.com ↗Patch: www.securityfocus.com ↗Patch: labs.idefense.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hjwm-5hwg-vcrm: Unspecified binaries in IBM DB2 8↗2022-05-01
▶
CVEList
CVE-2007-1086: Unspecified binaries in IBM DB2 8↗2007-02-23
▶
CVE-2007-1086 (HIGH CVSS 7.2) | Unspecified binaries in IBM DB2 8.x | cvebase.io