OSVDB ID: 48147

Title: IBM DB2 Universal Database INSTALL_JAR Arbitrary File Manipulation

Info

Disclosure

Sep 08, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, IBM has released Fixpak 17 to address this vulnerability.

Products

Unknown or Incomplete

References

CVE ID: 2008-2154 (see also: NVD)
Secunia Advisory ID: 31787
Related OSVDB ID: 48144 48145 48146 48148 48149
Vendor Specific News/Changelog Entry: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22142
http://www-01.ibm.com/support/docview.wss?uid=swg21318189
Mail List Post: http://seclists.org/fulldisclosure/2010/Oct/288
Other Advisory URL: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ21983
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22143
http://www.zerodayinitiative.com/advisories/ZDI-10-218

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/48147