NGSSoftware Insight Security Research Advisory – Informix Dynamic Server is a database developed by IBM. During a security assessment of Informix multiple password exposure flaws were discovered. When a user logs on to an Informix server their cleartext password can be found in a shared memory section. On Windows “everyone” can open the section and read the contents and thus gain access to the passwords for every logged on user. On both Linux and Windows, in the event of a crash the share memory is dumped in a log file which is world readable. All versions are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49297/NISR02082006E.txt
Source: https://packetstormsecurity.com/files/49297/NISR02082006E.txt.html