NVD

Id
29743  
Name
CVE-2014-0907  
Description
Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-30  
Modified Date
2017-01-06  
Seq
2014-0907  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157151 29743 CVE-2014-0907 http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html  View
157152 29743 CVE-2014-0907 20140603 CVE-2014-0907 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH In IBM DB2  View
157153 29743 CVE-2014-0907 http://www-01.ibm.com/support/docview.wss?uid=isg400001841  View
157154 29743 CVE-2014-0907 http://www-01.ibm.com/support/docview.wss?uid=isg400001843  View
157155 29743 CVE-2014-0907 IT00627  View
157156 29743 CVE-2014-0907 IT00684  View
157157 29743 CVE-2014-0907 IT00685  View
157158 29743 CVE-2014-0907 IT00686  View
157159 29743 CVE-2014-0907 IT00687  View
157160 29743 CVE-2014-0907 http://www-01.ibm.com/support/docview.wss?uid=swg21680454  View
157161 29743 CVE-2014-0907 http://www-304.ibm.com/support/docview.wss?uid=swg21676135  View
157162 29743 CVE-2014-0907 http://www.ibm.com/support/docview.wss?uid=swg1IT00686  View
157163 29743 CVE-2014-0907 http://www.ibm.com/support/docview.wss?uid=swg21610582#4  View
157164 29743 CVE-2014-0907 http://www.ibm.com/support/docview.wss?uid=swg21672100  View
157165 29743 CVE-2014-0907 67617  View
157166 29743 CVE-2014-0907 1030670  View
157167 29743 CVE-2014-0907 1030671  View
157168 29743 CVE-2014-0907 ibm-cve20140907-priv-escalation(91869)  View
157169 29743 CVE-2014-0907 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13818 JVNDB-2014-002693 Linux および UNIX 上で稼働する IBM DB2 における root 権限を取得される脆弱性 Linux および UNIX 上で稼働する IBM DB2 の 不特定の (1) setuid および (2) setgid プログラムには、検索パスに関する処理に不備があるため、root 権限を取得される脆弱性が存在します。 CVE-2014-0907 68308 CVE-2014-0907 29743 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002693.html 2014-05-26 2014-09-29 View