Login Request a demo
Unscored severity · published Oct 18, 2011
CVE-2011-4061
Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
Db2 · Ibm
9.7 · source: NVD
TM
Tivoli Monitoring For Databases · Ibm
All versions, or not specified · source: NVD
Affected product
DB
Db2
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4061
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4061
securityreason.com
http://securityreason.com/securityalert/8476
www.nth-dimension.org.uk
http://www.nth-dimension.org.uk/downloads.php?id=77
Exploit
http://www.nth-dimension.org.uk/downloads.php?id=83
www.securityfocus.com
http://www.securityfocus.com/archive/1/518659
Exploit
http://www.securityfocus.com/bid/48514
www.securityfocus.com
http://www.securityfocus.com/bid/51181
More from Db2
9.8
CVE-2026-10534
IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
9.8
CVE-2026-10543
IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
9.8
CVE-2026-10109
IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
9.1
CVE-2018-1426
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could…
8.8
CVE-2026-105464
IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management