Description
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
References
- 1408 third-party-advisory
- 20060814 Informix - Discovery, Attack and Defense mailing-list
- informix-lotofile-file-create(28383) vdb-entry
- 20060814 Multiple Arbitrary File Access (Write/Read) Vulnerabilities mailing-list
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf