CVE-2008-0369
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%
Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | informix_dynamic_server | 10.00 | cpe:2.3:a:ibm:informix_dynamic_server:10.00:*:*:*:*:*:*:* |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=650
secunia.com/advisories/28534
www-1.ibm.com/support/docview.wss?uid=swg1IC54309
www-1.ibm.com/support/docview.wss?uid=swg27011556
www.securityfocus.com/bid/27328
www.securitytracker.com/id?1019237
www.vupen.com/english/advisories/2008/0169
exchange.xforce.ibmcloud.com/vulnerabilities/39751
exchange.xforce.ibmcloud.com/vulnerabilities/40009
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.1%