admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 01:02:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2014/CVE-2014-09xx/CVE-2014-0907.json
René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

243 lines
8.1 KiB
JSON
Raw Blame History

{
"id": "CVE-2014-0907",
"sourceIdentifier": "psirt@us.ibm.com",
"published": "2014-05-30T23:55:02.517",
"lastModified": "2017-08-29T01:34:20.047",
"vulnStatus": "Modified",
"evaluatorComment": "Per http://cwe.mitre.org/data/definitions/426.html\n\n\"CWE-426: Untrusted Search Path\"",
"descriptions": [
{
"lang": "en",
"value": "Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de b\u00fasqueda de ruta no confiable en programas no especificados (1) setuid y (2) setgid en IBM DB2 9.5, 9.7 anterior a FP9a, 9.8, 10.1 anterior a FP3a y 10.5 anterior a FP3a en Linux y UNIX permiten a usuarios locales ganar privilegios root a trav\u00e9s de una librar\u00eda caballo de troya."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"accessVector": "LOCAL",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2
},
"baseSeverity": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": true,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*",
"matchCriteriaId": "CE1C4DE6-EB32-4A31-9FAA-D8DA31D8CF05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A8A8E221-7045-4BAD-9B29-ABBC5216559D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "56C39DC1-AD23-4F26-9727-EC0FBDF84BEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2513D42C-E558-4CC7-88D3-BB44F1B40157"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "6F441BE8-AEC0-44F0-875E-03C65A45CF68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "036E9715-CFAA-4F2A-B432-181EDCA3D812"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "9A55FBA0-4DFC-493D-91EF-EB56C241F9CE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "B539123F-B8AC-4051-9458-A780C68E9667"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "D3958E50-1F97-4C06-AF22-C635FB2557A0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "57AC4D14-805A-42F6-9348-D13C9A48136F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2952EB24-A015-4EC7-85E3-88588D0AB15B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E5FA4086-9B5D-4352-B717-3F826DE17D4B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "AD79FF24-6C10-437B-86AF-E211B8C6FDC5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "7ABB145C-44EE-47F5-9439-DE6433F8008E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6E232F83-BE4C-4B3E-A5B1-53F9D95F0368"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4B27E1F7-888C-40EE-85FF-B5DC099828C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "57DCF076-B475-41E6-B1ED-44FBC99238C2"
}
]
}
]
}
],
"references": [
{
"url": "http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html",
"source": "psirt@us.ibm.com"
},
{
"url": "http://seclists.org/fulldisclosure/2014/Jun/7",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680454",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21676135",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg1IT00686",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21610582#4",
"source": "psirt@us.ibm.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21672100",
"source": "psirt@us.ibm.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/67617",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securitytracker.com/id/1030670",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securitytracker.com/id/1030671",
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91869",
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/",
"source": "psirt@us.ibm.com"
}
]
}
Reference in New Issue View Git Blame Copy Permalink