IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Informix_dynamic_server | Ibm | 9.40.uc1 (including) | 9.40.uc1 (including) |
| Informix_dynamic_server | Ibm | 9.40.uc2 (including) | 9.40.uc2 (including) |
| Informix_extended_parallel_server | Ibm | 8.40_uc1 (including) | 8.40_uc1 (including) |
| Informix_extended_parallel_server | Ibm | 8.40_uc2 (including) | 8.40_uc2 (including) |