cve/2004/CVE-2004-2489.md
2024-06-18 02:51:15 +02:00

712 B

CVE-2004-2489

Description

Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.

POC

Reference

Github

No PoCs found on GitHub currently.