CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Access Control
Summary: the client implementation in ibm informix dynamic server 11.70.xcn on windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a trojan horse file.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-03-28
Last Modified Date: 2016-12-03