CVE-2007-5956

high

Description

Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38297

http://www.vupen.com/english/advisories/2007/3757

http://www.securityfocus.com/bid/26363

http://www-1.ibm.com/support/docview.wss?uid=swg27011082

http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252

http://secunia.com/advisories/27542

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624

Details

Source: Mitre, NVD

Published: 2007-11-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.1

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N