Lucene search

[email protected]CVE-2010-4053

HistoryOct 23, 2010 - 8:39 p.m.

CVE-2010-4053

2010-10-2320:39:04

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4053

stack-based buffer overflow

ibm informix dynamic server

remote code execution

nvd

security vulnerability

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.931 High

EPSS

Percentile

99.1%

JSON

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

Affected configurations

NVD

Node

ibminformix_dynamic_serverMatch11.10

ibminformix_dynamic_serverMatch11.50

CPENameOperatorVersion
ibm:informix_dynamic_serveribm informix dynamic servereq11.10
ibm:informix_dynamic_serveribm informix dynamic servereq11.50

CPE	Name	Operator	Version
ibm:informix_dynamic_server	ibm informix dynamic server	eq	11.10
ibm:informix_dynamic_server	ibm informix dynamic server	eq	11.50

References

secunia.com/advisories/41913

www.osvdb.org/68705

www.vupen.com/english/advisories/2010/2734

www.zerodayinitiative.com/advisories/ZDI-10-216/

exchange.xforce.ibmcloud.com/vulnerabilities/62619

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.931 High

EPSS

Percentile

99.1%

JSON

Related for CVE-2010-4053

openvas4 checkpoint_advisories1 cvelist1 prion1 nvd1