CVE-2008-0949

Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...

CVE-2008-0949

CVE-2008-0949 affects IBM Informix Dynamic Server (IDS) 7.x–11.x. Multiple connected sources describe an unspecified vulnerability that allows remote attackers to gain privileged access via a malformed connection request packet, implying a remote, unauthenticated privilege escalation with potenti...

CVE-2008-0727: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...

CVE-2008-0949: Undefined Security Weakness

Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...

IBM Informix Dynamic Server多个远程溢出漏洞

BUGTRAQ ID: 28198 CVECAN ID: CVE-2008-0727,CVE-2008-0949 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server默认监听于TCP 1526端口的oninit.exe进程在认证期间没有验证DBPATH变量和用户口令的长度，如果用户提供了超长的变量名或口令的话，就可以触发缓冲区溢出，导致执行任意指令。 IBM Informix Dynamic Server 9.x IBM Informix Dynamic Server 7.x IBM...

IBM Informix Dynamic Server multiple security vulnerabilities

Buffer overflow during authentication TCP/1526, buffer overflow on oversized DBPATH...

ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability

ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-011 March 13, 2008 -- CVE ID: CVE-2008-0727 -- Affected Vendors: IBM -- Affected Products: IBM Informix -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM's Informix Dynamic Server. User interaction is not required to exploit this vulnerability. Authentication is required in that an attacker must have database connection priviliges...

Informix Dynamic Server Multiple Remote Overflows

Binary data 4423.prm...

CVE-2008-0768: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

Information disclosure

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0369

Multiple unspecified programs in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs...

CVE-2008-0368

CVE-2008-0368 affects IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8. The vulnerability arises in the set-uid onedcu tool, where the second parameter Trace file is opened for writing with elevated privileges, enabling local attackers to create arbitrary files and potentially gain root ...

CVE-2008-0368: Undefined Security Weakness

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0369: Undefined Security Weakness

Multiple unspecified programs in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs...

Directory traversal

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...