NetSight
IP …
high7.3

CVE-2016-5995

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to …

Impact

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program.

Affected products

VendorProductAffected versions
IbmDb2
Versions 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5
IbmDb2 Connect
Versions 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5

Weakness classification

CWE-264

References