Description
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
References
- 20061001 IBM Informix Dynamic Server V10.0 File Clobbering during Install mailing-list
- informix-install-script-weak-permissions(29300) vdb-entry
- 20300 vdb-entry
- 29349 vdb-entry
- informix-installserver-symlink(29297) vdb-entry
- 20061001 IBM Informix Dynamic Server V10.0 File Clobbering during Install mailing-list
- 1686 third-party-advisory
- ADV-2006-3883 vdb-entry
- 22223 third-party-advisory