CVE-2007-6047

IBM DB2 Universal Database < 9.1 - Remote Code Execution via DB2DART TPUT Invocation

Title source: manual
STIX 2.1

Description

Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21255607
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3867
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26450
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ03646
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27667

Scores

EPSS 0.0200
EPSS Percentile 78.7%

Details

CWE
CWE-264
Status published
Products (1)
ibm/db2_universal_database < 9.1
Published Nov 20, 2007
Tracked Since Feb 18, 2026