CVE-2014-0907: High severity IBM DB2 vulnerability
Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0907?
The severity of CVE-2014-0907 is considered high due to the potential to gain root privileges on affected systems.
How do I fix CVE-2014-0907?
To fix CVE-2014-0907, you should update your IBM DB2 to the latest version that includes the security patches addressing these vulnerabilities.
Which versions of IBM DB2 are affected by CVE-2014-0907?
CVE-2014-0907 affects IBM DB2 versions 9.5, 9.7 prior to FP9a, 9.8, 10.1 prior to FP3a, and 10.5 prior to FP3a.
Can local users exploit CVE-2014-0907?
Yes, local users can exploit CVE-2014-0907 to gain unauthorized root privileges on systems running affected versions of IBM DB2.
What types of vulnerabilities are present in CVE-2014-0907?
CVE-2014-0907 contains multiple untrusted search path vulnerabilities in setuid and setgid programs.