CVE-2011-4061

CVE-2011-4061 describes multiple untrusted search path vulnerabilities in IBM DB2 Express Edition 9.7 and IBM Tivoli Monitoring for Databases: DB2 Agent. Specifically, the db2rspgn and kbbacf1 components are susceptible to privilege escalation. A local attacker can exploit this by placing a malicious libkbb.so file in the current working directory, leveraging the DT_RPATH ELF header. This vulnerability has a CVSS score of 6.9, indicating high severity with local access, medium attack complexity, and complete confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.