Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM DB2 DB2DIAG.LOG文件本地任意文件覆盖漏洞
Vulnerability Description
IBM DB2是美国IBM公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBM i、z/OS以及Windows服务器版本。 IBM DB2的某些设置suid位的二进制工具程序处理日志文件时存在安全漏洞,允许本地用户利用DB2DIAG.LOG临时文件通过符号链接攻击覆盖任意文件,可能导致拒绝服务或完全控制系统。 此漏洞不影响Windows平台。
CVSS Information
N/A
Vulnerability Type
N/A