CVEvulnerability
CVE-2007-5956
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.
Affected configurations
• ibm informix dynamic server (<= 10.00)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624 labs.idefense.com
- http://secunia.com/advisories/27542 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg27011082 Patch
- http://www.securityfocus.com/bid/26363 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3757 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38297 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624 labs.idefense.com
- http://secunia.com/advisories/27542 Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg27011082 Patch
- http://www.securityfocus.com/bid/26363 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3757 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38297 exchange.xforce.ibmcloud.com