CVE-2010-4069

Currently unrated

Key Information:

Vendor
IBM
Status
Informix Dynamic Server
Vendor
CVE Published:
25 October 2010

Summary

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

References

http://www.zerodayinitiative.com/advisories/ZDI-10-217/
x_refsource_MISC
http://www.vupen.com/english/advisories/2010/2735
vdb-entryx_refsource_VUPEN
http://www.osvdb.org/68707
vdb-entryx_refsource_OSVDB

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.