CVE-2007-1228

IBM DB2 UDB <8.2-9 - Info Disclosure

Title source: llm

Description

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.

References (5)

[Vendor Advisory] http://secunia.com/advisories/24387

[Vendor Advisory] http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711

[Vendor Advisory] http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/22729

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1017731

Scores

EPSS 0.0006

EPSS Percentile 18.4%

Classification

CWE

CWE-287

Status draft

Affected Products (9)

ibm/db2

Timeline

Published Mar 02, 2007

Tracked Since Feb 18, 2026