CVE-2016-0226

Description

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.

References

http://zerodayinitiative.com/advisories/ZDI-16-210/

http://zerodayinitiative.com/advisories/ZDI-16-209/

http://zerodayinitiative.com/advisories/ZDI-16-208/

http://www.securitytracker.com/id/1035286

http://www-01.ibm.com/support/docview.wss?uid=swg21978598

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS