Unauthorized Database Creation Privilege on Informix

NGSSoftware Insight Security Research Advisory Name: Unauthorized Database Creation Privilege on Informix Systems Affected: 9.40.xC6 and earlier and 10.00.xC2, C1 Severity: High Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public Advisory: 2nd August 200...

CVE-2004-2131

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...