← CVE Intelligence

CVE-2019-4448

IBM / DB2 High Performance Unload load for LUW PUBLISHED

Description (CNA)

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum_debug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This results in arbitrary code being executed with root authority. IBM X-Force ID: 163489.

Affected (CNA)

Vendor / productVersions
IBM / DB2 High Performance Unload load for LUWaffected 6.1; affected 6.1.0.1; affected 6.1.0.1IF1; affected 6.1.0.2; affected 6.1.0.2IF1; affected 6.1.0.1IF2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.