CVE-2004-2489 in Informix Dynamic Server
Summary
Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
10/25/2005
Disclosure
12/31/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 23373 | IBM Informix Dynamic Server memory corruption | 119 | Not defined | Official fix | CVE-2004-2489 |