CVE-2007-4270

published 2007-08-18

CVE-2007-4270: Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain…

medium 6.9 CVSS 3.1

AV L AC M Au N C C I C A C

Multiple race conditions in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain root privileges via a symlink attack on certain files.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	db2_universal_database	<= 8.0	—
ibm	db2_universal_database	<= 9.1	—