CVE-2007-1087 (db2)

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow. View Full Alert

Related Posts

  • CVE-2003-0367 (debian_linux, gzip)

    znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

  • Credit Unions & DDoS Attacks

    The Credit Union National Association (CUNA) issued a statement on Friday, April 26th, 2013 that a possible widespread Distributed Denial of Service (DDoS) attack may take place on Tuesday, May…

  • A Thesis for Handling Defensive Security

     [spp-transcript][/spp-transcript]   In this CIO Innovation Insider, I wanted to share with you what I believe is an important step to take in managing your business’ advanced security systems.…