CVE-2011-4061

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-10-18 · updated 2026-06-16

Description

Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.7
IBM Tivoli Monitoring For Databases: all versions

References

http://securityreason.com/securityalert/8476
http://www.nth-dimension.org.uk/downloads.php?id=77
http://www.nth-dimension.org.uk/downloads.php?id=83
http://www.securityfocus.com/archive/1/518659
http://www.securityfocus.com/bid/48514
http://www.securityfocus.com/bid/51181
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14063
http://securityreason.com/securityalert/8476
http://www.nth-dimension.org.uk/downloads.php?id=77
http://www.nth-dimension.org.uk/downloads.php?id=83
http://www.securityfocus.com/archive/1/518659
http://www.securityfocus.com/bid/48514

Get alerted when CVE-2011-4061 or the next vulnerability affects your stack