Secunia

Some vulnerabilities have been reported in Informix Dynamic Server, which can be exploited by malicious, local users to gain escalated privileges.

1) An error within the "onedcu" command can be exploited to write to a specified trace file with escalated privileges.

2) An error in various set-uid binaries within the handling of the "SQLIDEBUG" environment variable can be exploited to create arbitrary files on an affected system.

Successful exploitation allows gaining "root" privileges.

Solution
IDS 11.x:
Further details available in Customer Area

Provided and/or discovered by
An anonymous person, reported via iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg27011556
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54048
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54307
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54049
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54309
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54311
http://www-1.ibm.com/support/docview.wss?uid=swg1IC54317

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=650
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=651

Deep Links
Links available in Customer Area