{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-02T03:29:09.621","vulnerabilities":[{"cve":{"id":"CVE-2007-4271","sourceIdentifier":"cve@mitre.org","published":"2007-08-18T21:17:00.000","lastModified":"2026-04-23T00:35:47.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary files via a .. (dot dot) in an unspecified environment variable, which is appended to \"/tmp/\" and used as a log file.  NOTE: this issue might be related to symlink following."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en IBM DB2 UDB 8 anterior a Fixpak 15 y 9.1 anterior Fixpak 3 permite a usuarios locales crear archivos de su elección a través de la secuencia .. (punto punto) en una variables de entorno no específicada, la cual se encuentra añadida a \"/tmp/\" y es utilizada como fichero de log. NOTA: este asunto podría estar relacionado con el seguimiento de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:fp14:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"A896A825-6BBF-46A4-992D-F80CC0A93D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:*:*:fp2:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"AD1AACA4-8B6E-4DC7-A63D-7F6D1D1C7575"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=579","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26471","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018581","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY98210","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY99261","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255352","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2007-August/001765.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25339","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2912","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY98210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY99261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21255607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2007-August/001765.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}