CVE-2007-5957

IBM Informix Dynamic Server (IDS) versions 10.00.TC3TL and 11.10.TB4TL on Windows are affected by CVE-2007-5957, with a denial of service (application crash) triggered by unspecified SQ_ONASSIST requests. The available description does not specify the exact root cause, vulnerable component, or co...

CVE-2007-5956

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

CVE-2007-5957

Unspecified vulnerability in IBM Informix Dynamic Server IDS 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service application crash via unspecified SQONASSIST requests...

CVE-2007-5957: Undefined Security Weakness

Unspecified vulnerability in IBM Informix Dynamic Server IDS 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service application crash via unspecified SQONASSIST requests...

CVE-2007-5956: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability

iDefense Security Advisory 11.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 09, 2007 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. It contains several set-uid root binaries. For more information, visit the product homepage at...

IBM Informix Dynamic Server privilege escalation

Directory traversal on DBLANG environment variable parsing allows to specify attacker-controlled NLS files, leading to possibility of format string attacks for suid applications...

IBM Informix Dynamic Server存在多个漏洞

IBM Informix Dynamic Server是一款多线索数据库服务器。 IBM Informix Dynamic Server存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息或者以进程权限执行任意代码。 具体问题包括： -LOTOFILE、DBINFO、FILETOCLOB、getname、ifxfiletofile函数缓冲区溢出。 -在sysmaster中通过dbimp和dbexp过程执行任意命令。 -windows版本上超长用户名缓冲区溢出。 -通过SET DEBUG FILE执行任意命令。 -SET DEBUG FILE缓冲区溢出 -通过C code UDR提权...

CVE-2006-5664

CVE-2006-5664 describes a local vulnerability in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 where a symlink attack on temporary files could allow local users to compromise security. The report notes a local-access impact an...

CVE-2006-5664

The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit CSDK 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files...

CVE-2006-5663

CVE-2006-5663 affects IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90. The root cause is insecure permissions on installation scripts, allowing local users to gain privileges by modifying the scripts. The available documents do ...

CVE-2006-5663: Undefined Security Weakness

IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit CSDK 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts...

CVE-2006-5664: Undefined Security Weakness

The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit CSDK 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files...

CVE-2006-5163

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack...

CVE-2006-5163

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack...

CVE-2006-5163: Undefined Security Weakness

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack...

CVE-2006-3859

IBM Informix Dynamic Server IDS allows remote authenticated users to create and overwrite arbitrary files via the 1 LOTOFILE and 2 trltracefileset functions, and the 3 "SET DEBUG FILE" commands...

CVE-2006-3860

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the 1 "SET DEBUG FILE" SQL command, and the 2 startonpload and 3 dbexp functions...

CVE-2006-3859

CVE-2006-3859 affects IBM Informix Dynamic Server (IDS). The vulnerability allows remote authenticated users to create and overwrite arbitrary files via the LOTOFILE and trl_tracefile_set functions, and via the SET DEBUG FILE command. The underlying issue is that these APIs/commands can be abused...

CVE-2006-3860

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the 1 "SET DEBUG FILE" SQL command, and the 2 startonpload and 3 dbexp functions...