CVE Daily

CVE-2004-2319

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) crea...

Low CVSS 3.6

Overview

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.

CWE: N/A Published: 2004-12-31T05:00:00.000
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 3.6 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags