CVE-2004-2319 Path traversal in n/a

What is CVE-2004-2319?

CVE-2004-2319 is a low-severity path traversal vulnerability in Ibm Informix Dynamic Server, published on 16 Aug 2005. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.

Which versions are affected by CVE-2004-2319?

It affects 2 products.

Products include Ibm Informix Dynamic Server, Ibm Informix Extended Parallel Server.

How do I fix CVE-2004-2319?

No fix has been published for CVE-2004-2319 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2004-2319 being exploited?

There is no known exploitation of CVE-2004-2319 in the wild and no public exploit code.

Other vulnerabilities in Ibm Informix Dynamic Server

• CVE-2010-4070 Integer overflow in n/a Critical 10.0
• CVE-2009-2753 Memory corruption in n/a Critical 10.0
• CVE-2008-0949 Privilege escalation in n/a Critical 10.0
• CVE-2008-0768 Memory corruption in n/a Critical 10.0
• CVE-2011-1033 Memory corruption in n/a Critical 9.3

All Ibm Informix Dynamic Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qgfr-6gfj-7gg6.