6.9

CVE-2008-0369

Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Informix Dynamic Server Version10.00
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.234
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/28534
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg27011556
http://www.securityfocus.com/bid/27328
http://www.securitytracker.com/id?1019237
http://www.vupen.com/english/advisories/2008/0169
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39751
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=650
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54309
https://exchange.xforce.ibmcloud.com/vulnerabilities/40009