high7.2Public exploit code
CVE-2002-0905
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (2)2002-05-30 · local · linux · Verified
- IBM Informix SE 7.25 sqlexec - Local Buffer Overflow (1)2002-05-30 · local · linux · Verified
Impact
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Informix | Versions 7.25_.uc1_se, 7.25_.uc2_se, 7.25_.uc3_se |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html
- http://www.iss.net/security_center/static/9219.php
- http://www.securityfocus.com/bid/4891
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html
- http://www.iss.net/security_center/static/9219.php
- http://www.securityfocus.com/bid/4891