CVE-2007-4273

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized…

published August 18, 2007

CVSS
—
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized message file" that enables a format string attack, possibly involving the (1) OSSEMEMDBG or (2) TRC_LOG_FILE environment variable in db2licd (db2licm).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.6th percentile
Published
2007-08-18T21:00Z
EPSS history
Timeline
  • 18 AUG 21:00Z
    IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary directories and execute arbitrary code via a "crafted localized…
    cvelistv5