CVE-2007-5956

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-14 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.

Affected products

IBM Informix Dynamic Server: through 10.00

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624
http://secunia.com/advisories/27542
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252
http://www-1.ibm.com/support/docview.wss?uid=swg27011082
http://www.securityfocus.com/bid/26363
http://www.vupen.com/english/advisories/2007/3757
https://exchange.xforce.ibmcloud.com/vulnerabilities/38297
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624
http://secunia.com/advisories/27542
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252
http://www-1.ibm.com/support/docview.wss?uid=swg27011082
http://www.securityfocus.com/bid/26363

Get alerted when CVE-2007-5956 or the next vulnerability affects your stack