Re: Strange HPL failure - Sorted!

Posted in 2004

scottishpoet — 22 Jun 2004 02:54:43 -0700 — source: Usenet: comp.databases.informix

"David Williams" <djw@smooth1.fsnet.co.uk> wrote in message news:<cb57hg$d8d$1@news5.svr.pol.co.uk>... > So bug 156604.. > IBM Informix Standard Engine has a security vulnerability > that could result in unauthorized access to the root account. > > Abstract > An unauthorized user can cause the sqlexec program to spawn a > root-privileged shell and/or cause the sqlexec program to crash with a > segmentation fault. > > > http://www-1.ibm.com/support/docview.wss?rs=1004&context=SSGU8G&context=SSVT2J&context=SSGHZP&context=SSGU5Y&context=SSGKNY&context=SSGU5D&context=SSCRW7&uid=swg21116376&loc=en_US&cs=utf-8&lang=en+en > > what is the exploit for this then? I doubt IBM, like other software vendors, will want to make it public knowledge how to exploit security vulnerabilities in their products.