CVE-2007-1027: IBM DB2

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.

Affected products

• IBM DB2: version 9.0 only

Published 2007-02-21. Last modified 2026-06-16.