IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.