CVE-2004-2131: Undefined Security Weakness

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...

----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========----------

----------========== OPEN3S-2003-08-08-eng-informix-ontape ==========---------- Title: Local Vulnerability at Informix IDSv9.40 via ontape binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Any user with DSA privileges over Informix could achieve root...