CVE-2012-1796

Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IC79970	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21586193	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74325
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14526

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:db2:9.5:::::::*
	cpe:2.3:a:ibm:db2:9.5:fp1::::::
	cpe:2.3:a:ibm:db2:9.5:fp2::::::
	cpe:2.3:a:ibm:db2:9.5:fp2a::::::
	cpe:2.3:a:ibm:db2:9.5:fp3::::::
	cpe:2.3:a:ibm:db2:9.5:fp3a::::::
	cpe:2.3:a:ibm:db2:9.5:fp3b::::::
	cpe:2.3:a:ibm:db2:9.5:fp4::::::
	cpe:2.3:a:ibm:db2:9.5:fp4a::::::
	cpe:2.3:a:ibm:db2:9.5:fp5::::::
	cpe:2.3:a:ibm:db2:9.5:fp6::::::
	cpe:2.3:a:ibm:db2:9.5:fp6a::::::
	cpe:2.3:a:ibm:db2:9.5:fp7::::::
	cpe:2.3:a:ibm:db2:9.5:fp8::::::

OR	cpe:2.3:o:hp:hp-ux::::::::
	cpe:2.3:o:ibm:aix::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:sun:sunos::::::::

History

No history.

Information

Published : 2012-03-20 20:55

Updated : 2018-01-10 02:29

NVD link : CVE-2012-1796

Mitre link : CVE-2012-1796

CVE.ORG link : CVE-2012-1796

JSON object : View

Products Affected

ibm

db2
aix

hp

hp-ux

sun

sunos

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-1796", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-03-20T20:55:01.460", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC79970", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21586193", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74325", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14526", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en IBM Tivoli Monitoring Agent (ITMA), tal como se utiliza en IBM DB2 9.5 antes de FP9 en UNIX, permite a usuarios locales conseguir privilegios a trav\u00e9s de vectores desconocidos."}], "lastModified": "2018-01-10T02:29:29.927", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11ABF7CC-2FA5-4F2D-901A-2D0EF5B8E717"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58147402-53D5-4F15-862B-EE3DCCD75E2C"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3F3CB5E-D4FB-4C03-B108-06CC358B1F45"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB2EA14A-878A-4D8D-B17A-568712D21C48"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84C925CD-E753-401F-9EC0-6E3D9861C818"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "651D042C-A9F1-42D1-A6DD-95ADBCD08448"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A589323-B8B8-4CB4-B1A9-B9E771C99123"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61252AF9-A231-442A-A473-BA0608323BF2"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB37A1AA-58F0-4A39-8E38-C70692CE67BF"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D9D5B5B-8E23-4987-9BBE-8FE1F27CB1B5"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3E12C63-19FF-4BB9-9389-BF5E6B493F42"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp6a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10456C00-127D-46FE-82A4-D567AB19F87A"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E476599E-7087-4442-AED5-61DC1CA1F374"}, {"criteria": "cpe:2.3:a:ibm:db2:9.5:fp8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93F5745A-219B-48F6-95E9-85B4E516FA94"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}, {"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}, {"criteria": "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}