Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-2131. PoCs published by pask.
AI-analyzed exploit summary This exploit targets a local stack-based buffer overflow in the ontape binary of IBM Informix Dynamic Server 9.40. It leverages an unchecked ONCONFIG environment variable to overwrite the stack and execute arbitrary shellcode, leading to privilege escalation from the informix user to root.
Description
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
Exploits (2)
This exploit targets a local stack-based buffer overflow in the ontape binary of IBM Informix Dynamic Server 9.40. It leverages an unchecked ONCONFIG environment variable to overwrite the stack and execute arbitrary shellcode, leading to privilege escalation from the informix user to root.
This exploit targets a predictable temporary file vulnerability in IBM Informix Dynamic Server's onedcu binary. It creates a symbolic link to a cron file, which is then overwritten to add a privileged user, achieving local privilege escalation.