Vulnerabilities > CVE-2004-2319 - Local Privilege Escalation vulnerability in IBM products

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
ibm
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.

Vulnerable Configurations

Part Description Count
Application
Ibm
4

References