{"api_version":"1","generated_at":"2026-07-23T13:35:34+00:00","cve":"CVE-2007-5956","urls":{"html":"https://cve.report/CVE-2007-5956","api":"https://cve.report/api/cve/CVE-2007-5956.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5956","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5956"},"summary":{"title":"CVE-2007-5956","description":"Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-11-14 11:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/26363","name":"http://www.securityfocus.com/bid/26363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Informix Dynamic Server Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252","name":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082","name":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"IBM notice: The page you requested cannot be displayed","mime":"text/html","httpstatus":"404","archivestatus":"410"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38297","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/27542","name":"http://secunia.com/advisories/27542","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"IBM Informix Dynamic Server Directory Traversal and Denial of Service - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3757","name":"http://www.vupen.com/english/advisories/2007/3757","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5956","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5956","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5956","vulnerable":"1","versionEndIncluding":"10.00","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"informix_dynamic_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:47:00.668Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"27542","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27542"},{"name":"20071109 IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624"},{"name":"26363","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26363"},{"name":"IC54252","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252"},{"name":"ADV-2007-3757","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3757"},{"name":"ibm-ids-dblang-directory-traversal(38297)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38297"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-11-06T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"27542","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27542"},{"name":"20071109 IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624"},{"name":"26363","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26363"},{"name":"IC54252","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252"},{"name":"ADV-2007-3757","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3757"},{"name":"ibm-ids-dblang-directory-traversal(38297)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38297"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5956","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"27542","refsource":"SECUNIA","url":"http://secunia.com/advisories/27542"},{"name":"20071109 IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624"},{"name":"26363","refsource":"BID","url":"http://www.securityfocus.com/bid/26363"},{"name":"IC54252","refsource":"AIXAPAR","url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252"},{"name":"ADV-2007-3757","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3757"},{"name":"ibm-ids-dblang-directory-traversal(38297)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38297"},{"name":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082","refsource":"CONFIRM","url":"http://www-1.ibm.com/support/docview.wss?uid=swg27011082"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5956","datePublished":"2007-11-14T11:00:00.000Z","dateReserved":"2007-11-13T00:00:00.000Z","dateUpdated":"2024-08-07T15:47:00.668Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-11-14 11:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.00","matchCriteriaId":"D20BA745-CBA6-4429-BF60-14ED23F7591E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5956","Ordinal":"1","Title":"CVE-2007-5956","CVE":"CVE-2007-5956","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5956","Ordinal":"1","NoteData":"Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.","Type":"Description","Title":"CVE-2007-5956"},{"CveYear":"2007","CveId":"5956","Ordinal":"2","NoteData":"2007-11-14","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5956","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}