IBM DB2 Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	100690
Class:	Design Error
CVE:	CVE-2017-1439 CVE-2017-1451
Remote:	No
Local:	Yes
Published:	Sep 07 2017 12:00AM
Updated:	Oct 15 2018 12:00PM
Credit:	Rich Mirch.
Vulnerable:	IBM DB2 9.7 IBM DB2 11.1 IBM DB2 10.5 IBM DB2 10.1 IBM DB2 10.1
Not Vulnerable:

IBM DB2 Multiple Local Privilege Escalation Vulnerabilities

IBM DB2 is prone to multiple local privilege-escalation vulnerabilities.

Local attackers can exploit these issues to gain elevated root privileges and perform unauthorized actions.

IBM DB2 9.7, 10.1, 10.5, and 11.1 are vulnerable; other versions may also be affected.

IBM DB2 Multiple Local Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM DB2 Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM DB2 Multiple Local Privilege Escalation Vulnerabilities

References:

• IBM Homepage (IBM)
  
• Published Security Vulnerabilities for DB2 for Linux, UNIX, and Windows includin (IBM)
  
• swg22006061: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-143 (IBM)