CVE-2009-2753

Currently unrated

Key Information:

Vendor
IBM
Status
Informix Dynamic Server
Vendor
CVE Published:
5 March 2010

Summary

Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.

References

http://secunia.com/advisories/38731
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/0508
vdb-entryx_refsource_VUPEN
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
vendor-advisoryx_refsource_AIXAPAR

EPSS Score

66% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.