Buffer Overflow Vulnerability in IBM Informix Dynamic Server

CVE-2006-3854

Summary

A buffer overflow vulnerability exists in IBM Informix Dynamic Server when handling excessively long usernames. Specifically, this issue arises when the server processes error messages during its operation, leading to a vulnerability in the vsprintf function. Attackers can exploit this flaw remotely, potentially enabling the execution of arbitrary code on the affected system. The vulnerability is particularly relevant for versions 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5 running on Windows environments. This incident stems from an incomplete fix for a prior vulnerability.

References