CVE-2007-5664: IBM DB2 Universal Database

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization.

Affected products

• IBM DB2 Universal Database: version 8 only; version 9.1 only; version 9.5 only

Published 2008-04-16. Last modified 2026-06-16.