CVE-2007-1228

2007-03-0222:19:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

27.4%

JSON

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the “fenced” user to access certain unauthorized directories.

Affected configurations

Nvd

Node

ibmdb2Match8.2

ibmdb2Match8.2fp1

ibmdb2Match8.2fp2

ibmdb2Match8.2fp3

ibmdb2Match8.2fp4

ibmdb2Match8.2fp5

ibmdb2Match8.2fp6

ibmdb2Match9.0

ibmdb2Match9.0fp1

AND

unixunix

VendorProductVersionCPE
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:*:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp1:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp2:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp3:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp4:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp5:*:*:*:*:*:*
ibmdb28.2cpe:2.3:a:ibm:db2:8.2:fp6:*:*:*:*:*:*
ibmdb29.0cpe:2.3:a:ibm:db2:9.0:*:*:*:*:*:*:*
ibmdb29.0cpe:2.3:a:ibm:db2:9.0:fp1:*:*:*:*:*:*
unixunix*cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:::::::*
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp1::::::
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp2::::::
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp3::::::
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp4::::::
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp5::::::
ibm	db2	8.2	cpe:2.3:a:ibm:db2:8.2:fp6::::::
ibm	db2	9.0	cpe:2.3:a:ibm:db2:9.0:::::::*
ibm	db2	9.0	cpe:2.3:a:ibm:db2:9.0:fp1::::::
unix	unix	*	cpe:2.3:o:unix:unix::::::::