ByteOS Network

CVE Vulnerability Details :

CVE-2014-0907

PUBLISHED

More Info Official Page

Assigner-ibm

Assigner Org ID-9a959283-ebb5-44b6-b705-dcc2bbced522

Published At-30 May, 2014 | 23:00

Updated At-06 Aug, 2024 | 09:27

▼CVE Numbering Authority (CNA)

Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2014/Jun/7	mailing-list x_refsource_FULLDISC
http://www-304.ibm.com/support/docview.wss?uid=swg21676135	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686	vendor-advisory x_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg1IT00686	x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg21672100	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	x_refsource_CONFIRM
http://secunia.com/advisories/59463	third-party-advisory x_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg21610582#4	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030670	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/67617	vdb-entry x_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685	vendor-advisory x_refsource_AIXAPAR
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/	x_refsource_MISC
http://www-01.ibm.com/support/docview.wss?uid=swg21680454	x_refsource_CONFIRM
http://www.securitytracker.com/id/1030671	vdb-entry x_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilities/91869	vdb-entry x_refsource_XF
http://secunia.com/advisories/60482	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/59451	third-party-advisory x_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687	vendor-advisory x_refsource_AIXAPAR
http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html	x_refsource_MISC
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684	vendor-advisory x_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627	vendor-advisory x_refsource_AIXAPAR

Hyperlink: http://seclists.org/fulldisclosure/2014/Jun/7

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www-304.ibm.com/support/docview.wss?uid=swg21676135

Resource:

x_refsource_CONFIRM

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686

Resource:

vendor-advisory

x_refsource_AIXAPAR

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg1IT00686

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg21672100

Resource:

x_refsource_CONFIRM

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/59463

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg21610582#4

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1030670

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/67617

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685

Resource:

vendor-advisory

x_refsource_AIXAPAR

Hyperlink: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/

Resource:

x_refsource_MISC

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21680454

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1030671

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/91869

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://secunia.com/advisories/60482

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/59451

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687

Resource:

vendor-advisory

x_refsource_AIXAPAR

Hyperlink: http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html

Resource:

x_refsource_MISC

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684

Resource:

vendor-advisory

x_refsource_AIXAPAR

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627

Resource:

vendor-advisory

x_refsource_AIXAPAR

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2014/Jun/7	mailing-list x_refsource_FULLDISC x_transferred
http://www-304.ibm.com/support/docview.wss?uid=swg21676135	x_refsource_CONFIRM x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686	vendor-advisory x_refsource_AIXAPAR x_transferred
http://www.ibm.com/support/docview.wss?uid=swg1IT00686	x_refsource_CONFIRM x_transferred
http://www.ibm.com/support/docview.wss?uid=swg21672100	x_refsource_CONFIRM x_transferred
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/59463	third-party-advisory x_refsource_SECUNIA x_transferred
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	x_refsource_CONFIRM x_transferred
http://www.ibm.com/support/docview.wss?uid=swg21610582#4	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1030670	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/67617	vdb-entry x_refsource_BID x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685	vendor-advisory x_refsource_AIXAPAR x_transferred
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/	x_refsource_MISC x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg21680454	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1030671	vdb-entry x_refsource_SECTRACK x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/91869	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/60482	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/59451	third-party-advisory x_refsource_SECUNIA x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687	vendor-advisory x_refsource_AIXAPAR x_transferred
http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html	x_refsource_MISC x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684	vendor-advisory x_refsource_AIXAPAR x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627	vendor-advisory x_refsource_AIXAPAR x_transferred