Lucene search

[email protected]CVE-2010-4069

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4069

2022-10-0316:21:04

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4069

ibm informix dynamic server

buffer overflow

ids

sql

security vulnerability

8.1 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.104 Low

EPSS

Percentile

95.0%

JSON

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

Affected configurations

NVD

Node

ibminformix_dynamic_serverMatch7.31

ibminformix_dynamic_serverMatch9.40.tc5

ibminformix_dynamic_serverMatch9.40.uc1

ibminformix_dynamic_serverMatch9.40.uc2

ibminformix_dynamic_serverMatch9.40.uc3

ibminformix_dynamic_serverMatch9.40.uc5

ibminformix_dynamic_serverMatch9.40.xc5

ibminformix_dynamic_serverMatch9.40.xc7

ibminformix_dynamic_serverMatch10.00

ibminformix_dynamic_serverMatch10.00.tc3tl

ibminformix_dynamic_serverMatch10.00.xc1

ibminformix_dynamic_serverMatch10.00.xc2

ibminformix_dynamic_serverMatch10.00.xc3

ibminformix_dynamic_serverMatch10.00.xc4

ibminformix_dynamic_serverMatch10.00.xc5

ibminformix_dynamic_serverMatch10.00.xc6

ibminformix_dynamic_serverMatch10.00.xc7w1

ibminformix_dynamic_serverMatch10.00.xc8

ibminformix_dynamic_serverMatch10.00.xc9

ibminformix_dynamic_serverMatch10.00.xc10

ibminformix_dynamic_serverMatch11.10

ibminformix_dynamic_serverMatch11.10.tb4tl

ibminformix_dynamic_serverMatch11.10.xc1

ibminformix_dynamic_serverMatch11.10.xc1de

ibminformix_dynamic_serverMatch11.10.xc2

ibminformix_dynamic_serverMatch11.10.xc2e

ibminformix_dynamic_serverMatch11.50

ibminformix_dynamic_serverMatch11.50.xc1

ibminformix_dynamic_serverMatch11.50.xc2

CPENameOperatorVersion
ibm:informix_dynamic_serveribm informix dynamic servereq7.31
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.tc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc1
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc2
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc3
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc7
ibm:informix_dynamic_serveribm informix dynamic servereq10.00
ibm:informix_dynamic_serveribm informix dynamic servereq10.00.tc3tl

CPE	Name	Operator	Version
ibm:informix_dynamic_server	ibm informix dynamic server	eq	7.31
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.tc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc2
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc3
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc7
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.00
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.00.tc3tl