← Database

CVE-2007-1027

MEDIUM CVSS: 4.4 Published: 2007-02-21 Modified: 2026-06-16

Description

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.

Affected Platforms

Ibm Db2

Weakness Type

CWE-59

References