CVE-2001-0924

IBM Informix Web DataBlade - Directory Traversal via LO Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0924. PoCs published by Beck Mr.R.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in the Web Datablade Module for Informix SQL, allowing remote attackers to access arbitrary web-readable files via crafted requests containing dot-dot-slash sequences. The issue occurs when large object caching is enabled, independent of the web server used.

Description

Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Beck Mr.R · textremotemultiple
https://www.exploit-db.com/exploits/21160

The exploit describes a directory traversal vulnerability in the Web Datablade Module for Informix SQL, allowing remote attackers to access arbitrary web-readable files via crafted requests containing dot-dot-slash sequences. The issue occurs when large object caching is enabled, independent of the web server used.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: IBM Informix Web Datablade Module
No auth needed
Prerequisites: Large object caching enabled · Web Datablade Module configured
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=100688672019635&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/7585
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3575
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=100654890029878&w=2

Scores

EPSS 0.0813
EPSS Percentile 94.2%

Details

Status published
Products (8)
ibm/informix_web_datablade 3.3
ibm/informix_web_datablade 3.4
ibm/informix_web_datablade 3.5
ibm/informix_web_datablade 3.6
ibm/informix_web_datablade 3.7
ibm/informix_web_datablade 4.10
ibm/informix_web_datablade 4.11
ibm/informix_web_datablade 4.12
Published Nov 22, 2001
Tracked Since Feb 18, 2026