CVE-2004-2319
Low
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.
SeverityLow
CVSS3.6
Exploit probability—
Product
Ibm Informix Dynamic Server
PublishedDec 31, 2004
First seenDec 31, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix_dynamic_server | 9.40.uc1, 9.40.uc2 | — |
| ibm informix_extended_parallel_server | 8.40_uc1, 8.40_uc2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.