exploitDog

CVE-2007-5956

Опубликовано: 14 нояб. 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.

Ссылки

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624
http://secunia.com/advisories/27542
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252
http://www-1.ibm.com/support/docview.wss?uid=swg27011082
Patch
http://www.securityfocus.com/bid/26363
http://www.vupen.com/english/advisories/2007/3757
https://exchange.xforce.ibmcloud.com/vulnerabilities/38297
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624
http://secunia.com/advisories/27542
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252
http://www-1.ibm.com/support/docview.wss?uid=swg27011082
Patch
http://www.securityfocus.com/bid/26363
http://www.vupen.com/english/advisories/2007/3757
https://exchange.xforce.ibmcloud.com/vulnerabilities/38297

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:informix_dynamic_server:*:*:*:*:*:*:*:*

Версия до 10.00 (включая)

EPSS

Процентиль: 36%

0.0045

Низкий

7.2 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-g3mf-xpqx-5mqg

github

больше 4 лет назад

Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.

EPSS

Процентиль: 36%

0.0045

Низкий

7.2 High

CVSS2

Дефекты

CWE-22