668 matches found
CVE-2006-2547
Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...
Design/Logic Flaw
Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...
CVE-2006-2547
Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...
CVE-2006-2547
CVE-2006-2547 affects SAP with Informix, specifically the sapdba command. The vulnerability arises from insecure environment variable handling, enabling local users to run arbitrary commands via unknown vectors. Affected scope is SAP Informix deployments before version 700 and 700 up to patch 100...
SAP sapdba for Informix database administration utility privilege escalation
Improper environment cariables validation allows to run any command with informix rights...
[Full-disclosure] CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command
The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityPre-AdvisoryLocalPrivilegeEscalationinSAPsapdbaCommand.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: Local Privilege Escalation in SAP sapdba Command Vulnerability Class: Insecure...
CVE-2005-3642
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username...
CVE-2005-3642
Vulnerability summary (CVE-2005-3642) : IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled is affected. The issue allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username. This yields partial impacts...
CVE-2005-3642
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username...
CVE-2004-2489
Format string vulnerability in IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename...
CVE-2004-2490
CVE-2004-2490 describes a buffer overflow in IBM Informix Dynamic Server (IDS) , affecting versions 9.40.xC1 and 9.40.xC2 . The root cause is a vulnerability in the handling of a long GL_PATH environment variable, which allows local users to execute arbitrary code . The impact is local code execu...
CVE-2004-2489
CVE-2004-2489 concerns IBM Informix Dynamic Server (IDS). The described vulnerability is a format string flaw in IDS prior to 9.40.xC3 that enables local code execution when an attacker manipulates the INFORMIXDIR environment variable to point to a file containing format string specifiers in its ...
EMC Legato Networker Detection
The remote host is running EMC Legato Networker backup software or one of these variants : - Sun StorEdge Enterprise Backup Software - Sun Solstice Backup Software - Informix Storage Manager C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19557; scriptversion"1.12";...
Informix Telnet Server Detection (High Port)
Binary data 3192.prm...
CVE-2004-2319
IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...
CVE-2004-2319
IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...
CVE-2004-2131
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...
CVE-2004-2131
CVE-2004-2131 affects IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier. The flaw is a stack-based buffer overflow in ontape triggered by a long ONCONFIG environment variable, allowing local users with DSA privileges to execute arbitrary code. Affected component is ontape; root cause is unch...
CVE-2004-2319
IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...