CVE-2018-1781

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symbolic link attack to read/write/corrupt a file that they originally did not have permission to access. IBM X-Force ID: 148804.

• CWE-59

• http://www.ibm.com/support/docview.wss?uid=ibm10733939Vendor Advisory
• http://www.securityfocus.com/bid/105885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042086Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148804VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10733939Vendor Advisory
• http://www.securityfocus.com/bid/105885Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042086Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/148804VDB Entry, Vendor Advisory

Published

Nov 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17794An issue was discovered in cplus-dem.c in GNU libiberty, as …
• CVE-2018-17795The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 an…
• CVE-2018-17796An issue was discovered in MRCMS (aka mushroom) through 3.1.…
• CVE-2018-17797An issue was discovered in zzcms 8.3. user/zssave.php allows…
• CVE-2018-17798An issue was discovered in zzcms 8.3. user/ztconfig.php allo…
• CVE-2018-1780IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…7.8
• CVE-2018-1782IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a l…6.5
• CVE-2018-17825An issue was discovered in AdPlug 2.3.1. There are several d…9.8
• CVE-2018-17826HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.h…
• CVE-2018-17827HisiPHP 1.0.8 allows remote attackers to execute arbitrary P…
• CVE-2018-17828Directory traversal vulnerability in ZZIPlib 0.13.69 allows …
• CVE-2018-1783IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2…