informix dynamic server vulnerabilities and exploits

(subscribe to this query)

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441.

Ibm Informix Dynamic Server 12.10

onedcu in IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8 allows local users to create arbitrary files via the Trace file argument.

Ibm Informix Dynamic Server 10.0

Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs.

Ibm Informix Dynamic Server 10.00

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941.

Ibm Informix Dynamic Server 12.10

The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files.

Ibm Informix Dynamic Server 10.00 Ibm Informix I-connect 2.90 Ibm Informix Client Sdk 2.90

IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.

Ibm Informix Client Sdk 2.90 Ibm Informix Dynamic Server 10.00 Ibm Informix I-connect 2.90

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.

Ibm Informix Dynamic Server 10.uc Rc1

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390.

Ibm Informix Open Admin Tool 12.1 Ibm Informix Open Admin Tool 11.7 Ibm Informix Open Admin Tool 11.5

2 EDB exploits

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and previous versions and 11.10.xC2 and previous versions, allow malicious users to execute arbitrary code...

Ibm Informix Dynamic Server Ibm Informix Storage Manager -

IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620.

Ibm Informix Dynamic Server 12.10

« PREV 1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook