CVE-2007-1087

IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481	Broken Link
http://osvdb.org/40970	Broken Link
http://www-1.ibm.com/support/docview.wss?uid=swg21255747	Patch Vendor Advisory
http://www.attrition.org/pipermail/vim/2007-August/001765.html	Third Party Advisory
http://www.securityfocus.com/bid/22677	Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32651	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:db2:8.0:::::::*
	cpe:2.3:a:ibm:db2:8.0:fp13::::::
	cpe:2.3:a:ibm:db2:8.0:fp14::::::
	cpe:2.3:a:ibm:db2:8.0:fp8::::::
	cpe:2.3:a:ibm:db2:8.0:fp9::::::
	cpe:2.3:a:ibm:db2:8.1:::::::*
	cpe:2.3:a:ibm:db2:8.1:fp13::::::
	cpe:2.3:a:ibm:db2:8.1:fp14::::::
	cpe:2.3:a:ibm:db2:8.1.4:::::::*
	cpe:2.3:a:ibm:db2:8.1.5:::::::*
	cpe:2.3:a:ibm:db2:8.1.6:::::::*
	cpe:2.3:a:ibm:db2:8.1.6c:::::::*
	cpe:2.3:a:ibm:db2:8.1.7:::::::*
	cpe:2.3:a:ibm:db2:8.1.7b:::::::*
	cpe:2.3:a:ibm:db2:8.1.8:::::::*
	cpe:2.3:a:ibm:db2:8.1.8a:::::::*
	cpe:2.3:a:ibm:db2:8.1.9:::::::*
	cpe:2.3:a:ibm:db2:8.1.9a:::::::*
	cpe:2.3:a:ibm:db2:9.1:::::::*
	cpe:2.3:a:ibm:db2:9.1:fp1::::::

History

No history.

Information

Published : 2007-02-23 22:28

Updated : 2024-02-28 11:01

NVD link : CVE-2007-1087

Mitre link : CVE-2007-1087

CVE.ORG link : CVE-2007-1087

JSON object : View

Products Affected

ibm

db2

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-1087", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-02-23T22:28:00.000", "references": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/40970", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21255747", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.attrition.org/pipermail/vim/2007-August/001765.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22677", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32651", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow."}, {"lang": "es", "value": "IBM DB2 8.x anterior a 8.1 FixPak 15 y 9.1 anterior a Fix Pack 2 no finaliza adecuadamente ciertas cadenas de entrada, lo cual permite a usuarios locales ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de variables de entorno no especificadas que disparan un desbordamiento de b\u00fafer basado en pila."}], "lastModified": "2019-05-23T17:02:07.083", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC1FC760-D058-4DE6-80B3-F3AA22757A10"}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "333F67D2-27CC-4013-B3FA-63BF6F557269"}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC"}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19584860-5ADF-4647-AF39-88C236407FAC"}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20FE296C-25D0-4689-BAA3-AFCA2C1CC388"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8190EC6B-BA0D-498D-8ECB-2E37D8742A29"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCF379F0-6D58-47A9-849E-C48D13496C87"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05154E69-63D7-4F51-89F5-1199A3E6E074"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B729909-4377-4472-94C4-432CD89BCF7A"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC320999-569A-48AA-92B7-CDE8394BBC39"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.6c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDA7BA56-F167-4236-A725-B2F38D6B0D03"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F97F5666-4502-437D-AA81-8C0488CD73B1"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.7b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DDB5A77-3D2C-4142-9448-1542D9C99A1D"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FFAAAD6-56E0-48FE-8D9E-13BD13D6A776"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.8a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4C77B11-C53E-49E7-9C49-2C574390B609"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFF6FFCD-E744-4D45-8BDD-32ADC94AD655"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.9a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4837F6EC-4E0D-480B-8DF4-BD0DA49394A7"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B28091A-8772-41DC-9D91-D5359CDDA7A9"}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}