iDefense Security Advisory 11.09.07 – Local exploitation of a directory traversal vulnerability in IBM Corp.’s Informix Dynamic Server allows attackers to elevate privileges to root. This vulnerability exists due to insufficient checking for directory traversal sequences when processing the DBLANG environment variable. By using values containing directory traversal specifiers, such as “../”, an attacker can cause set-uid binaries to use Native Language Support (NLS) message files under their control. iDefense confirmed the existence of this vulnerability in IBM Corp.’s Informix Dynamic Server version 10.00 UC6TL installed on a Linux system. Other versions are also suspected as vulnerable. Versions for other supported Unix systems should also be considered vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60837/11.09.07-2.txt
Source: https://packetstormsecurity.com/files/60837/iDEFENSE-Security-Advisory-2007-11-09.2.html