Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2014-0907

Published: 30/05/2014 Updated: 29/08/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Db2

Vulnerability Summary

Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm db2 10.1.0.3

ibm db2 10.1.0.2

ibm db2 9.7.0.5

ibm db2 9.7.0.4

ibm db2 9.7.0.9

ibm db2 9.7.0.8

ibm db2 9.7.0.1

ibm db2 9.7

ibm db2 10.1.0.1

ibm db2 10.1

ibm db2 9.7.0.3

ibm db2 9.7.0.2

ibm db2 10.5.0.2

ibm db2 10.5.0.1

ibm db2 10.5

ibm db2 9.7.0.7

ibm db2 9.7.0.6

ibm db2 9.5

References

NVD-CWE-Otherhttp://www.ibm.com/support/docview.wss?uid=swg21610582#4http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685http://www.ibm.com/support/docview.wss?uid=swg1IT00686http://www.ibm.com/support/docview.wss?uid=swg21672100http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.htmlhttps://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/http://seclists.org/fulldisclosure/2014/Jun/7http://www.securityfocus.com/bid/67617http://secunia.com/advisories/59451http://www-01.ibm.com/support/docview.wss?uid=isg400001843http://www-01.ibm.com/support/docview.wss?uid=isg400001841http://secunia.com/advisories/59463http://secunia.com/advisories/60482http://www-01.ibm.com/support/docview.wss?uid=swg21680454http://www-304.ibm.com/support/docview.wss?uid=swg21676135http://www.securitytracker.com/id/1030671http://www.securitytracker.com/id/1030670https://exchange.xforce.ibmcloud.com/vulnerabilities/91869https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook