IBM Informix Dynamic Server privilege escalation
Published:		12.11.2007
Source:		BUGTRAQ
SecurityVulns ID:		8331
Type:		local
Level:		6/10
Description:		Directory traversal on DBLANG environment variable parsing allows to specify attacker-controlled NLS files, leading to possibility of format string attacks for suid applications.

Affected:		IBM : Informix Dynamic Server 10.00
CVE:		CVE-2007-5670

Original document

IDEFENSE, iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability (12.11.2007)

Discuss:

Read or add your comments to this news (0 comments)