CVE-2016-0226

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-28 · updated 2026-06-17
Weakness: CWE-284

Description

The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.

Affected products

IBM Informix Dynamic Server: 11.70.xcn

References

http://www-01.ibm.com/support/docview.wss?uid=swg21978598
http://www.securitytracker.com/id/1035286
http://zerodayinitiative.com/advisories/ZDI-16-208/
http://zerodayinitiative.com/advisories/ZDI-16-209/
http://zerodayinitiative.com/advisories/ZDI-16-210/
http://www-01.ibm.com/support/docview.wss?uid=swg21978598
http://www.securitytracker.com/id/1035286
http://zerodayinitiative.com/advisories/ZDI-16-208/
http://zerodayinitiative.com/advisories/ZDI-16-209/
http://zerodayinitiative.com/advisories/ZDI-16-210/

Get alerted when CVE-2016-0226 or the next vulnerability affects your stack