Lucene search

[email protected]CVE-2010-4070

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4070

2022-10-0316:21:03

CWE-189

[email protected]

web.nvd.nist.gov

cve

2010

4070

integer overflow

librpc.dll

portmap.exe

ism

ibm informix dynamic server

ids

remote attackers

arbitrary code

denial of service

heap memory corruption

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Affected configurations

NVD

Node

ibminformix_dynamic_serverMatch7.31

ibminformix_dynamic_serverMatch9.40.tc5

ibminformix_dynamic_serverMatch9.40.uc1

ibminformix_dynamic_serverMatch9.40.uc2

ibminformix_dynamic_serverMatch9.40.uc3

ibminformix_dynamic_serverMatch9.40.uc5

ibminformix_dynamic_serverMatch9.40.xc5

ibminformix_dynamic_serverMatch9.40.xc7

ibminformix_dynamic_serverMatch10.00

ibminformix_dynamic_serverMatch10.00.tc3tl

ibminformix_dynamic_serverMatch10.00.xc1

ibminformix_dynamic_serverMatch10.00.xc2

ibminformix_dynamic_serverMatch10.00.xc3

ibminformix_dynamic_serverMatch10.00.xc4

ibminformix_dynamic_serverMatch10.00.xc5

ibminformix_dynamic_serverMatch10.00.xc6

ibminformix_dynamic_serverMatch10.00.xc7w1

ibminformix_dynamic_serverMatch10.00.xc8

ibminformix_dynamic_serverMatch10.00.xc9

ibminformix_dynamic_serverMatch10.00.xc10

ibminformix_dynamic_serverMatch11.10

ibminformix_dynamic_serverMatch11.10.tb4tl

ibminformix_dynamic_serverMatch11.10.xc1

ibminformix_dynamic_serverMatch11.10.xc1de

ibminformix_dynamic_serverMatch11.50

CPENameOperatorVersion
ibm:informix_dynamic_serveribm informix dynamic servereq7.31
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.tc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc1
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc2
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc3
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc7
ibm:informix_dynamic_serveribm informix dynamic servereq10.00
ibm:informix_dynamic_serveribm informix dynamic servereq10.00.tc3tl

CPE	Name	Operator	Version
ibm:informix_dynamic_server	ibm informix dynamic server	eq	7.31
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.tc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc2
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc3
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc7
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.00
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.00.tc3tl

Rows per page:

1-10 of 251

References

secunia.com/advisories/41915

www.osvdb.org/68706

www.vupen.com/english/advisories/2010/2733

www.zerodayinitiative.com/advisories/ZDI-10-215/

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

Related for CVE-2010-4070

cvelist1 nvd1 prion1