CVE-2011-1033

IBM Informix Dynamic Server (IDS) 11.50 is affected by a stack-based buffer overflow in the oninit process when handling malformed USELASTCOMMITTED arguments in a SET ENVIRONMENT statement, enabling remote code execution. OpenVAS entries (Windows/Linux) corroborate RCE in IDS via the oninit path;...

CVE-2011-1033: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server IDS 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement...