CVE-2007-5758: IBM DB2 Universal Database

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable.

Affected products

• IBM DB2 Universal Database: version 8 only; version 9.1 only; version 9.5 only

Published 2008-04-16. Last modified 2026-06-16.