>> IBM Informix Insecure Permissions and Temporary File Creation Vulnerabilities
Title : IBM Informix Insecure Permissions and Temporary File Creation Vulnerabilities VUPEN ID : VUPEN/ADV-2006-4280 CVE ID : CVE-2006-5663 - CVE-2006-5664
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2006-10-31
Technical Description
Multiple vulnerabilities have been identified in IBM Informix, which could be exploited by malicious users to bypass security restrictions.
The first issue is due to insecure default permissions of the installation scripts, which could allow unprivileged users to insert arbitrary code that will be executed during installation.
The second flaw is due to errors in the installation process that creates temporary files in an insecure manner, which could be exploited by local attackers to create or overwrite arbitrary files with the privileges of the user running the vulnerable application.
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback If you have additional information or corrections for this security advisory please submit them via our contact form.
