IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.

According to its version, the installation of IBM DB2 9.1 on the remote host is reported to be vulnerable to a number of local flaws. The most serious of these flaws involves a local buffer overflow. An attacker exploiting these flaws would need local access to the DB2 server. Successful exploitation would result in the attacker executing arbitrary code.

According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. 

In addition, the fenced userid may be able to access directories without proper authorization.

According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqle_db2ra_as_recvrequest() function. A remote attacker can send such packets without authentication to deny service to legitimate users of the application. 

In addition, the fenced userid may be able to access directories without proper authorization.

ID	Name	Product	Family	Severity
3921	IBM DB2 9.1 < 9.1 Fix Pack 2 Multiple Vulnerabilities	Nessus Network Monitor	Database	high
24699	IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities	Nessus	Databases	critical
23937	IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities	Nessus	Databases	medium

Detections

Analytics

CVE-2007-1228

high

Tenable Plugins

high

critical

medium