exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

iDEFENSE Security Advisory 2008-01-31.1

Posted Feb 4, 2008

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 01.31.08 - Local exploitation of a file creation vulnerability in IBM Corp.'s Informix Dynamic Server allows attackers to elevate privileges to root. When the SQLIDEBUG environment variable is set, several set-uid binaries will log debugging information to the specified file. iDefense confirmed the existence of this vulnerability in IBM Corp.'s Informix Dynamic Server version 10.00 UC6TL installed on a Linux system. Other versions are also suspected as vulnerable. Versions for other supported Unix systems should also be considered vulnerable.

tags | advisory, local, root

systems | linux, unix

advisories | CVE-2008-0369

SHA-256 | f2864fc19e93a164fbc79f6bd51e58cf26ac30861f82d244ac1f12a20cee48e9

Download | Favorite | View

Related Files

No related files