CVE-2012-0204

Published Jan 31, 2013

Last updated 3 months ago

CVSS info 9.3

Overview

Description: Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, 8.7, and 9.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Source: psirt@us.ibm.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Evaluator

Comment: Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'
Impact: Per: http://www-01.ibm.com/support/docview.wss?uid=swg21623501 "CVSS Base Score: 9.3 / CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C) a malicious user who has access to a machine with the Import Export Manager installed could execute arbitrary commands in the context of any user who accesses the Import Export Manager application. "
Solution: Per: http://www-01.ibm.com/support/docview.wss?uid=swg21623501 "CVSS Base Score: 9.3 / CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C) a malicious user who has access to a machine with the Import Export Manager installed could execute arbitrary commands in the context of any user who accesses the Import Export Manager application. "

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A85A0D3-1941-4F6B-8787-286A009440DC"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "915337FC-0BFD-44FB-A7D2-765E1422DD4A"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "276EFD18-CD4A-4F1A-AAF2-953F22B075DA"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8DEC85B5-BFB8-4B07-8F63-0752C94E58FF"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:8.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27BE8D08-C377-4248-ADB7-69962F5D2C3F"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_import_export_manager:9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E47D3B91-D36A-4F16-9874-41376887B6D1"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "317FAE67-76E2-4084-9393-8A02D255BAF5"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA7096B4-291F-49BB-8DBC-E67AC901CF08"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D547E88D-FE3F-4C90-B7D8-301A1449E9AB"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5585D2C4-6575-4469-A6EF-CCDC3A0BEDB2"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "42A9CF5C-79EC-4BBF-92AF-2AB3DC125684"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F3BF0A4B-5DDB-420D-B1F2-8C1ED23F60CF"
          },
          {
            "criteria": "cpe:2.3:a:ibm:infosphere_information_server_metabrokers_\\&_bridges:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81D571DC-7829-4F9C-A959-36E586B4C7C8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Evaluator

Configurations

References