OSVDB ID: 40969

Title: IBM DB2 Universal Database Unspecified Local Arbitrary File Manipulation

Info

Disclosure

Feb 22, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Feb 22, 2007

Description

Classification

Location: Local Access Required
Attack Type: Attack Type Unknown
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Private
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, IBM Corp. has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

CVE ID: 2007-1086 (see also: NVD)
Bugtraq ID: 22677
ISS X-Force ID: 32650
Related OSVDB ID: 40970 40971
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-02/0439.html
http://www.attrition.org/pipermail/vim/2007-August/001765.html
Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481
http://www-1.ibm.com/support/docview.wss?uid=swg21255747
Vendor Specific News/Changelog Entry: http://www-1.ibm.com/support/docview.wss?uid=swg21255747

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/40969