IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)

A buffer overflow vulnerability has been reported in IBM Informix Client Software Development Kit and Ibm Informix Connect Runtime. An attacker could exploit this vulnerability via a .nfx file with a crafted HostSize, and possibly ProtoSize and ServerSize, field that triggers a stack-based buffer...

IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)

A buffer overflow vulnerability has been reported in IBM Informix Dynamic Database Server. An attacker could exploit this vulnerability via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. Successful exploitation of this vulnerability could all...

IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 Multiple Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exists in the onedcu binary. Specifically, when the binary is invoked a...

Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability

No description provided by source. Exploit Title: ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability Date: 2010-04-08 Author: ZSploit.com Software Link: N/A Version: N/A Tested on: IBM Informix Dynamic Server 10.0 CVE : CVE-2009-2754 ! /usr/bin/env python...

IBM Informix SE 7.25 sqlexec Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string copy of the INFORMIXD...

IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 Multiple Vulnerabilities (1)

No description provided by source. source: http://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exists in the onedcu binary. Specifically, when the binary is invoked a...

ibm informix web datablade 3.x/4.1 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3575/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL is used to provide wbBinaries for storing large binary resources such as images, sounds, etc. The W...

IBM Informix Dynamic Server 11.50.x / 11.70.x < 11.70.xC7 RCE (credentialed check)

The version of IBM Informix Dynamic Server installed on the remote host is 11.50.x or 11.70.x prior to 11.70.xC7. It is, therefore, affected by a remote code execution vulnerability in the 'genxmlqueryhdr' and genxmlquery' XML functions due to an overflow condition. An authenticated, remote...

IBM Informix Dynamic Server Detection (credentialed check)

IBM Informix Dynamic, a database server, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70097; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptxrefname:"IAVT",...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0492

Cross-site scripting XSS vulnerability in IBM Informix Open Admin Tool OAT 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

IBM Informix Genero Detection

The remote host has IBM Informix Genero, an application development environment that provides graphical tools for developing business applications. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64378; scriptversion"1.7";...

IBM Informix Genero < 2.41 png_decompress_chunk Integer Overflow

The installed version of IBM Informix Genero is earlier than 2.41 and is, therefore, potentially affected by an integer overflow vulnerability in the libpng library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execu...

Buffer Overflow Bugs Found in Informix database Servers

Several versions of the popular Informix database server from IBM contain two buffer overflow vulnerabilities that could lead to remote code execution. The problems affect eight different versions of the server and are present on Informix installations on all supported platforms. A researcher at...

Buffer overflow

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement...

CVE-2012-4857

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement...

CVE-2012-4857

CVE-2012-4857 affects IBM Informix Server: 11.50 up to 11.50.xC9W2 and 11.70 up to 11.70.xC7. A buffer overflow in the handling of unspecified SQL statements allows an authenticated user who can connect to the Informix database server (locally or remotely) to crash the server or execute arbitrary...

IBM Informix Dynamic Server buffer overflow

SET COLLATION buffer overflow...

[DCA-2011-0013] - IBM Informix Dynamic Server 11.50 SET COLLATION Stack OverFlow

IBM Informix Dynamic Server 11.50 SET COLLATION Stack OverFlow DCA-2011-0013 Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software/Hardware - IBM Informix Vendor Product Description IBM Informix is a family of relational database management system RDBM...

CVE-2012-3334

Stack-based buffer overflow in IBM Informix Dynamic Server IDS 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement...