Description
Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.
References (22)
Core 22
Core References
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg1IT00686
Various Sources x_refsource_misc
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-0907/
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Jun/7
Various Sources x_refsource_confirm
http://www-304.ibm.com/support/docview.wss?uid=swg21676135
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00686
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21672100
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=isg400001843
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59463
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=isg400001841
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21610582#4
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030670
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67617
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00685
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21680454
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030671
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91869
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/60482
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59451
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00687
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/126940/IBM-DB2-Privilege-Escalation.html
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00684
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00627
Scores
EPSS
0.0066
EPSS Percentile
47.8%
Details
Status
published
Products (18)
ibm/db2
9.5
ibm/db2
9.7
ibm/db2
9.7.0.1
ibm/db2
9.7.0.2
ibm/db2
9.7.0.3
ibm/db2
9.7.0.4
ibm/db2
9.7.0.5
ibm/db2
9.7.0.6
ibm/db2
9.7.0.7
ibm/db2
9.7.0.8
... and 8 more
Published
May 30, 2014
Tracked Since
Feb 18, 2026