CVE-2006-3854

Buffer overflow in IBM Informix Dynamic Server IDS 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is...

CVE-2006-3854

CVE-2006-3854 affects IBM Informix Dynamic Server (IDS) on Windows: IDS 9.40.TC7/TC8 and 10.00.TC4/TC5 are vulnerable to a buffer overflow caused by a long username that overflows a vsprintf-based error message, enabling remote arbitrary code execution. The issue is noted as stemming from an inco...

Error logging buffer overflow in Informix

NGSSoftware Insight Security Research Advisory Name: Error logging buffer overflow in Informix Systems Affected: Informix 9.40.xC7 and xC8, 10.00.xC3 and xC4 Severity: Critical Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public Advisory: 2nd August 2006...