Tech Alert: Security Issues with IDS & XPS

If you have an IBM support agreement for IDS or XPS, you probably have been notified already. However, just in case, IBM issued this technical flash last week. Abstract There are several security issues which have been addressed involving IBM IDS and IBM XPS database servers. This document provides information on the issues, versions where they occur, versions where the issues are addressed, and workarounds. Content PROBLEM Five specific security-related product issues have been identified in IBM Informix Dynamic Server (IDS) 9.40.xC1, and most are also applicable to other major versions of IDS. Two of the issues also apply to IBM Informix Extended Parallel Server (XPS) version 8.40.UCx and earlier. NOTE: In all cases, the security of the system is compromised when someone with authorized local shell access to the machine hosting the database server intentionally constructs input data specifically designed to take advantage of these security issues. These are not known to present remote access exposures. More info is available at http://www-1.ibm.com/support/docview.wss?uid=swg21153336 <http://www-1.ibm.com/support/docview.wss?uid=swg21153336&rs=260>; &rs=260. Fred Hubbard One Point Solutions www.onepointsol.com