{"id":"CVE-2016-0226","aliases":["EUVD-2016-0261","GHSA-c268-c5mw-v8g9"],"status":"published","title":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly...","description":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00379,"percentile":0.32109,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2016-03-28T23:00:00Z","modified":"2026-06-17T00:37:09Z","products":[{"vendor":"ibm","product":"informix_dynamic_server"}],"references":[{"url":"http://zerodayinitiative.com/advisories/ZDI-16-210/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-209/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21978598","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035286","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-208/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0226"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-208"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-209"},{"url":"http://zerodayinitiative.com/advisories/ZDI-16-210"},{"url":"https://github.com/advisories/GHSA-c268-c5mw-v8g9"}],"sources":{"cve":[{"id":"CVE-2016-0226","description":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.","status":"published","published":"2016-03-28T23:00:00Z","modified":"2024-08-05T22:15:23.12Z","updated_at":"2026-11-02T14:33:37.12286Z"}],"euvd":[{"id":"EUVD-2016-0261","description":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.","status":"published","published":"2016-03-28T23:00:00Z","modified":"2024-08-05T22:15:23Z","updated_at":"2026-11-03T02:23:02.292251Z"}],"ghsa":[{"id":"GHSA-c268-c5mw-v8g9","title":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly...","description":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.","status":"published","published":"2022-05-17T03:32:54Z","modified":"2025-04-12T12:58:01Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:01:26.389958Z"}],"nvd":[{"id":"CVE-2016-0226","description":"The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.","status":"published","published":"2016-03-28T23:59:00.127Z","modified":"2026-06-17T00:37:09.17Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:22.479119Z"}]}}