Buffer Overflow Vulnerabilities in Informix Dynamic Server by IBM
CVE-2009-2753

Currently unrated

Key Information:

Vendor
IBM
Status
Informix Dynamic Server
Vendor
CVE Published:
5 March 2010

Summary

Multiple buffer overflow vulnerabilities exist in the authentication functionality of librpc.dll used in the Informix Storage Manager (ISM) Portmapper service in IBM Informix Dynamic Server versions prior to 10.00.TC9 and 11.10.TC3. These vulnerabilities allow remote attackers to exploit the system by providing crafted parameter sizes, potentially executing arbitrary code.

References

http://secunia.com/advisories/38731
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/0508
vdb-entryx_refsource_VUPEN
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
vendor-advisoryx_refsource_AIXAPAR

EPSS Score

28% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.