IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2…

published 2004-12-31 21 y ago modified 2026-06-16 4 mo ago also EUVD-2004-2311

cvss: 3.6; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 41%
public exploits: 0; none known

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.

Patch / fix

links 3

Exploit prediction

0.48% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

securityfocus.com http://www.securityfocus.com/bid/9512 referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/archive/1/351770 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	3.6	AV:L/AC:L/Au:N/C:P/I:P/A:N

References

securityfocus.com /bid/9511
vdb-entry, patch
securityfocus.com /bid/9512
vdb-entry, exploit, patch
secunia.com /advisories/10737/
third-party-advisory, patch, vendor-advisory
securityfocus.com /archive/1/351770
mailing-list, exploit, vendor-advisory
osvdb.org /3760
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/14969
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/14971
vdb-entry
osvdb.org /3758
vdb-entry
www-1.ibm.com /support/docview.wss?uid=swg21153336

Sources

CVE List CVE-2004-2319
NVD CVE-2004-2319

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary