Description (CNA)
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://zerodayinitiative.com/advisories/ZDI-16-210/
- http://zerodayinitiative.com/advisories/ZDI-16-209/
- http://www-01.ibm.com/support/docview.wss?uid=swg21978598
- http://www.securitytracker.com/id/1035286
- http://zerodayinitiative.com/advisories/ZDI-16-208/
ADP enrichment
No English description supplied.