CVE		CVE-2007-1027
Статус		Candidate
Описание		Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.
Важность		Low
CVSS score		2,3
CVSS vector		(AV:L/AC:H/Au:R/C:P/I:P/A:P/B:N)
Phase		Assigned (20.02.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1027
References		AIXAPAR : IY94817
		BID : 22614
		FRSIRT : ADV-2007-0652
		SECTRACK : 1017665
		SECTRACK : 1017695
		SECUNIA : 24213
SecurityVulns:		Проблемы символьных линков в IBM DB2