CVE-2016-5995

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program.

Score
CVSS 3.0 7.3 High
Status
Modified - psirt@us.ibm.com
Published
2016-10-01
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References

 
 
© AVABIS GmbH privacypolicy about