CVE-2009-2754

Currently unrated

Key Information:

Vendor
IBM
Status
Informix Dynamic Server
Vendor
CVE Published:
5 March 2010

Summary

Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.

References

http://secunia.com/advisories/38731
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/509793/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2010/0508
vdb-entryx_refsource_VUPEN

EPSS Score

90% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.