VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 16, 2008· Updated Jun 16, 2026

CVE-2007-5758

CVE-2007-5758

Description

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.

Affected products

4
  • IBM/Db2 Universal Database4 versions
    cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:db2_universal_database:8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*
    • (no CPE)range: < 9.5 before Fix Pack 1, < 9.1 before Fix Pack 4a, < 8 before FixPak 16

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.