{"id": "CVE-2007-1087", "bulletinFamily": "NVD", "title": "CVE-2007-1087", "description": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.", "published": "2007-02-23T17:28:00", "modified": "2017-07-28T21:30:37", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1087", "reporter": "NVD", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/32651", "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481", "http://www.securityfocus.com/bid/22677", "http://www.attrition.org/pipermail/vim/2007-August/001765.html", "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"], "cvelist": ["CVE-2007-1087"], "type": "cve", "lastseen": "2017-07-29T11:21:53", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ibm:db2_universal_database:8.0:fp14", "cpe:/a:ibm:db2_universal_database:8.1.4", "cpe:/a:ibm:db2_universal_database:8.1.6c", "cpe:/a:ibm:db2_universal_database:8.10", "cpe:/a:ibm:db2_universal_database:8.0::linux", "cpe:/a:ibm:db2_universal_database:8.1.6", "cpe:/a:ibm:db2_universal_database:8.1.7", "cpe:/a:ibm:db2_universal_database:8.1.9a", "cpe:/a:ibm:db2_universal_database:8.12", "cpe:/a:ibm:db2_universal_database:9.1::hp_ux", "cpe:/a:ibm:db2_universal_database:8.1.8", "cpe:/a:ibm:db2_universal_database:8.1.5", "cpe:/a:ibm:db2_universal_database:8.0:fp13", "cpe:/a:ibm:db2_universal_database:8.1.8a", "cpe:/a:ibm:db2_universal_database:8.1.9", "cpe:/a:ibm:db2_universal_database:8.1::aix", "cpe:/a:ibm:db2_universal_database:8.1.7b"], "cvelist": ["CVE-2007-1087"], "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables that trigger a heap-based buffer overflow.", "edition": 1, "enchantments": {}, "hash": "782fee78dec9d7d2d2662d118d6e4d14429c7695b2a9280c2c82de29da32fd1c", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "cfd16da9581e0c21db590e40dfd9e493", "key": "cvss"}, {"hash": "1fa3d4d6ee428b09392ca6807dab4702", "key": "title"}, {"hash": "051f1228a6f6c23b103d8b74c1fcc53c", "key": "published"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "f2ac678e1969e98cc71a8a2ff88071a9", "key": "modified"}, {"hash": "8315e0652ccaf3170fbf29e5063907cd", "key": "cvelist"}, {"hash": "6cee6b013755f5598f3d4fddd91d2264", "key": "href"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "7c8c509a4c99646e5452cdd1c6b49af0", "key": "references"}, {"hash": "07274839cd0dd71fb9235505cc8995b1", "key": "cpe"}, {"hash": "ddd11db3c977fcacdcff4d9389e9e116", "key": "description"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1087", "id": "CVE-2007-1087", "lastseen": "2016-09-03T08:29:35", "modified": "2008-11-15T01:43:08", "objectVersion": "1.2", "published": "2007-02-23T17:28:00", "references": ["http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=481", "http://xforce.iss.net/xforce/xfdb/32651", "http://www.securityfocus.com/bid/22677", "http://www.attrition.org/pipermail/vim/2007-August/001765.html", "http://www-1.ibm.com/support/docview.wss?uid=swg21255747"], "reporter": "NVD", "scanner": [], "title": "CVE-2007-1087", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T08:29:35"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "07274839cd0dd71fb9235505cc8995b1"}, {"key": "cvelist", "hash": "8315e0652ccaf3170fbf29e5063907cd"}, {"key": "cvss", "hash": "cfd16da9581e0c21db590e40dfd9e493"}, {"key": "description", "hash": "ddd11db3c977fcacdcff4d9389e9e116"}, {"key": "href", "hash": "6cee6b013755f5598f3d4fddd91d2264"}, {"key": "modified", "hash": "7ad85666f7ffbac1c0465ad586e4c51e"}, {"key": "published", "hash": "051f1228a6f6c23b103d8b74c1fcc53c"}, {"key": "references", "hash": "a730996e0260c087aede89fe435b52c9"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "1fa3d4d6ee428b09392ca6807dab4702"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "a76c8db9ed202305ce37efde53ea743f681616cfe8bb7aa2ea41af27eba941bc", "viewCount": 0, "enchantments": {"vulnersScore": 7.2}, "objectVersion": "1.3", "cpe": ["cpe:/a:ibm:db2_universal_database:8.0:fp14", "cpe:/a:ibm:db2_universal_database:8.1.4", "cpe:/a:ibm:db2_universal_database:8.1.6c", "cpe:/a:ibm:db2_universal_database:8.10", "cpe:/a:ibm:db2_universal_database:8.0::linux", "cpe:/a:ibm:db2_universal_database:8.1.6", "cpe:/a:ibm:db2_universal_database:8.1.7", "cpe:/a:ibm:db2_universal_database:8.1.9a", "cpe:/a:ibm:db2_universal_database:8.12", "cpe:/a:ibm:db2_universal_database:9.1::hp_ux", "cpe:/a:ibm:db2_universal_database:8.1.8", "cpe:/a:ibm:db2_universal_database:8.1.5", "cpe:/a:ibm:db2_universal_database:8.0:fp13", "cpe:/a:ibm:db2_universal_database:8.1.8a", "cpe:/a:ibm:db2_universal_database:8.1.9", "cpe:/a:ibm:db2_universal_database:8.1::aix", "cpe:/a:ibm:db2_universal_database:8.1.7b"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"result": {"nessus": [{"id": "DB2_9FP2.NASL", "type": "nessus", "title": "IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities", "description": "According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. \n\nIn addition, the fenced userid may be able to access directories without proper authorization.", "published": "2007-02-23T00:00:00", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=24699", "cvelist": ["CVE-2007-1087", "CVE-2007-1228", "CVE-2007-1088", "CVE-2007-1086"], "lastseen": "2018-04-12T00:08:33"}]}}