Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
http://www.iss.net/security_center/static/9219.php
http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html