Lucene search

MitreCVE-2002-0905

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-0905

2002-10-0404:00:00

mitre

web.nvd.nist.gov

cve

2002

0905

buffer overflow

sqlexec

informix

se-7.25

root privileges

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

Percentile

0.4%

JSON

Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.

Affected configurations

Nvd

Node

ibminformixMatch7.25_.uc1_se

ibminformixMatch7.25_.uc2_se

ibminformixMatch7.25_.uc3_se

VendorProductVersionCPE
ibminformix7.25_.uc1_secpe:2.3:a:ibm:informix:7.25_.uc1_se:*:*:*:*:*:*:*
ibminformix7.25_.uc2_secpe:2.3:a:ibm:informix:7.25_.uc2_se:*:*:*:*:*:*:*
ibminformix7.25_.uc3_secpe:2.3:a:ibm:informix:7.25_.uc3_se:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	informix	7.25_.uc1_se	cpe:2.3:a:ibm:informix:7.25_.uc1_se:::::::*
ibm	informix	7.25_.uc2_se	cpe:2.3:a:ibm:informix:7.25_.uc2_se:::::::*
ibm	informix	7.25_.uc3_se	cpe:2.3:a:ibm:informix:7.25_.uc3_se:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-05/0270.html

www.iss.net/security_center/static/9219.php

www.securityfocus.com/bid/4891

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-0905