CVE-2016-0226

Published: Mar 28, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.

Affected (1)

Products: Ibm: Informix Dynamic Server

Ibm

1 product

Informix Dynamic Server

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Server	Version 11.70.xcn

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (10)

http://www-01.ibm.com/support/docview.wss?uid=swg21978598

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securitytracker.com/id/1035286

Source: psirt@us.ibm.com

http://zerodayinitiative.com/advisories/ZDI-16-208/

Source: psirt@us.ibm.com

http://zerodayinitiative.com/advisories/ZDI-16-209/

Source: psirt@us.ibm.com

http://zerodayinitiative.com/advisories/ZDI-16-210/

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21978598