NVD

Id
56399  
Name
CVE-2007-4271  
Description
Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to "/tmp/" and used as a log file. NOTE: this issue might be related to symlink following.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-18  
Modified Date
2011-03-07  
Seq
2007-4271  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287245 56399 CVE-2007-4271 20070816 IBM DB2 Universal Database Directory Traversal Vulnerability  View
287246 56399 CVE-2007-4271 1018581  View
287247 56399 CVE-2007-4271 IY98210  View
287248 56399 CVE-2007-4271 IY99261  View
287249 56399 CVE-2007-4271 http://www-1.ibm.com/support/docview.wss?uid=swg21255352  View
287250 56399 CVE-2007-4271 http://www-1.ibm.com/support/docview.wss?uid=swg21255607  View
287251 56399 CVE-2007-4271 [VIM] 20070821 Recent DB2 Vulnerabilities  View
287252 56399 CVE-2007-4271 25339  View
287253 56399 CVE-2007-4271 ADV-2007-2912  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55564 JVNDB-2007-004256 IBM DB2 UDB におけるディレクトリトラバーサルの脆弱性 IBM DB2 UDB には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-4271 27626 CVE-2007-4271 56399 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004256.html 2007-08-16 2012-09-25 View