{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-02-22T00:00:00", "descriptions": [{"lang": "en", "value": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "40970", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/40970"}, {"name": "20070818 Recent DB2 Vulnerabilities", "tags": ["mailing-list", "x_refsource_VIM"], "url": "http://www.attrition.org/pipermail/vim/2007-August/001765.html"}, {"name": "IY94833", "tags": ["vendor-advisory", "x_refsource_AIXAPAR"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"}, {"name": "db2-bss-bo(32651)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32651"}, {"name": "20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities", "tags": ["third-party-advisory", "x_refsource_IDEFENSE"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481"}, {"name": "22677", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22677"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-1087", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "40970", "refsource": "OSVDB", "url": "http://osvdb.org/40970"}, {"name": "20070818 Recent DB2 Vulnerabilities", "refsource": "VIM", "url": "http://www.attrition.org/pipermail/vim/2007-August/001765.html"}, {"name": "IY94833", "refsource": "AIXAPAR", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"}, {"name": "db2-bss-bo(32651)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32651"}, {"name": "20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities", "refsource": "IDEFENSE", "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481"}, {"name": "22677", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22677"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:43:22.606Z"}, "title": "CVE Program Container", "references": [{"name": "40970", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/40970"}, {"name": "20070818 Recent DB2 Vulnerabilities", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"], "url": "http://www.attrition.org/pipermail/vim/2007-August/001765.html"}, {"name": "IY94833", "tags": ["vendor-advisory", "x_refsource_AIXAPAR", "x_transferred"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"}, {"name": "db2-bss-bo(32651)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32651"}, {"name": "20070222 IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities", "tags": ["third-party-advisory", "x_refsource_IDEFENSE", "x_transferred"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481"}, {"name": "22677", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22677"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-1087", "datePublished": "2007-02-23T22:00:00", "dateReserved": "2007-02-23T00:00:00", "dateUpdated": "2024-08-07T12:43:22.606Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "CC1FC760-D058-4DE6-80B3-F3AA22757A10", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*", "matchCriteriaId": "333F67D2-27CC-4013-B3FA-63BF6F557269", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*", "matchCriteriaId": "77D67C50-31B6-4058-9B4D-F06EF8D9B3BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*", "matchCriteriaId": "19584860-5ADF-4647-AF39-88C236407FAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*", "matchCriteriaId": "20FE296C-25D0-4689-BAA3-AFCA2C1CC388", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "8190EC6B-BA0D-498D-8ECB-2E37D8742A29", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*", "matchCriteriaId": "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*", "matchCriteriaId": "DCF379F0-6D58-47A9-849E-C48D13496C87", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "05154E69-63D7-4F51-89F5-1199A3E6E074", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "3B729909-4377-4472-94C4-432CD89BCF7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "DC320999-569A-48AA-92B7-CDE8394BBC39", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.6c:*:*:*:*:*:*:*", "matchCriteriaId": "EDA7BA56-F167-4236-A725-B2F38D6B0D03", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "F97F5666-4502-437D-AA81-8C0488CD73B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.7b:*:*:*:*:*:*:*", "matchCriteriaId": "6DDB5A77-3D2C-4142-9448-1542D9C99A1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "3FFAAAD6-56E0-48FE-8D9E-13BD13D6A776", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.8a:*:*:*:*:*:*:*", "matchCriteriaId": "E4C77B11-C53E-49E7-9C49-2C574390B609", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "DFF6FFCD-E744-4D45-8BDD-32ADC94AD655", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:8.1.9a:*:*:*:*:*:*:*", "matchCriteriaId": "4837F6EC-4E0D-480B-8DF4-BD0DA49394A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "7B28091A-8772-41DC-9D91-D5359CDDA7A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*", "matchCriteriaId": "2AF419E7-F2B5-4E2A-B85D-C0EC6C1DEA4F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow."}, {"lang": "es", "value": "IBM DB2 8.x anterior a 8.1 FixPak 15 y 9.1 anterior a Fix Pack 2 no finaliza adecuadamente ciertas cadenas de entrada, lo cual permite a usuarios locales ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de variables de entorno no especificadas que disparan un desbordamiento de b\u00fafer basado en pila."}], "id": "CVE-2007-1087", "lastModified": "2019-05-23T17:02:07.083", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-02-23T22:28:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/40970"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.attrition.org/pipermail/vim/2007-August/001765.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/22677"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32651"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}