| Package | Affected versions | Patched versions |
|---|---|---|
| db2 universal database | ≤ 8.0≤ 9.1 |
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink following.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free