Lucene search

K
cve[email protected]CVE-2007-1088
HistoryFeb 23, 2007 - 10:28 p.m.

CVE-2007-1088

2007-02-2322:28:00
CWE-119
web.nvd.nist.gov
18
ibm db2
buffer overflow
cve-2007-1088
security vulnerability
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.

Affected configurations

NVD
Node
ibmdb2Match8.0
OR
ibmdb2Match8.0fp13
OR
ibmdb2Match8.0fp14
OR
ibmdb2Match8.0fp8
OR
ibmdb2Match8.0fp9
OR
ibmdb2Match8.1
OR
ibmdb2Match8.1fp13
OR
ibmdb2Match8.1fp14
OR
ibmdb2Match8.1.4
OR
ibmdb2Match8.1.5
OR
ibmdb2Match8.1.6
OR
ibmdb2Match8.1.6c
OR
ibmdb2Match8.1.7
OR
ibmdb2Match8.1.7b
OR
ibmdb2Match8.1.8
OR
ibmdb2Match8.1.8a
OR
ibmdb2Match8.1.9
OR
ibmdb2Match8.1.9a
OR
ibmdb2Match9.1
OR
ibmdb2Match9.1fp1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%