Security Advisory
CVE-2007-1027
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.