CVE-2007-5670

Related Files

iDEFENSE Security Advisory 2007-11-09.2

Posted Nov 9, 2007

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 11.09.07 - Local exploitation of a directory traversal vulnerability in IBM Corp.'s Informix Dynamic Server allows attackers to elevate privileges to root. This vulnerability exists due to insufficient checking for directory traversal sequences when processing the DBLANG environment variable. By using values containing directory traversal specifiers, such as "../", an attacker can cause set-uid binaries to use Native Language Support (NLS) message files under their control. iDefense confirmed the existence of this vulnerability in IBM Corp.'s Informix Dynamic Server version 10.00 UC6TL installed on a Linux system. Other versions are also suspected as vulnerable. Versions for other supported Unix systems should also be considered vulnerable.

tags | advisory, local, root

systems | linux, unix

advisories | CVE-2007-5670

SHA-256 | c580928cdff87079ff8049a71654f53cd2a67db3f7aabda25d920e7032f5199b

Download | Favorite | View