CVE-2008-0949

CVE-2008-0949 affects IBM Informix Dynamic Server (IDS) 7.x–11.x. Multiple connected sources describe an unspecified vulnerability that allows remote attackers to gain privileged access via a malformed connection request packet, implying a remote, unauthenticated privilege escalation with potenti...

IBM Informix Dynamic Server多个远程溢出漏洞

BUGTRAQ ID: 28198 CVECAN ID: CVE-2008-0727,CVE-2008-0949 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server默认监听于TCP 1526端口的oninit.exe进程在认证期间没有验证DBPATH变量和用户口令的长度，如果用户提供了超长的变量名或口令的话，就可以触发缓冲区溢出，导致执行任意指令。 IBM Informix Dynamic Server 9.x IBM Informix Dynamic Server 7.x IBM...

IBM Informix Dynamic Server multiple security vulnerabilities

Buffer overflow during authentication TCP/1526, buffer overflow on oversized DBPATH...

ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability

ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-011 March 13, 2008 -- CVE ID: CVE-2008-0727 -- Affected Vendors: IBM -- Affected Products: IBM Informix -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM's Informix Dynamic Server. User interaction is not required to exploit this vulnerability. Authentication is required in that an attacker must have database connection priviliges...

Informix Dynamic Server Multiple Remote Overflows

Binary data 4423.prm...

IBM Informix Dynamic Server multiple security vulnerabilities

SQLIDEBUG and onedcu operators allow to access arbitrary files...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

Information disclosure

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0369

Multiple unspecified programs in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs...

CVE-2008-0368

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

CVE-2008-0368

CVE-2008-0368 affects IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8. The vulnerability arises in the set-uid onedcu tool, where the second parameter Trace file is opened for writing with elevated privileges, enabling local attackers to create arbitrary files and potentially gain root ...

CVE-2008-0369

Multiple unspecified programs in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs...

CVE-2008-0369

IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8 is affected by a local file-creation vulnerability involving the SQLIDEBUG environment variable. When set, several set-UID binaries log to the specified file and change the file’s ownership to the invoking user, enabling local privilege es...

CVE-2007-5957

Unspecified vulnerability in IBM Informix Dynamic Server IDS 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service application crash via unspecified SQONASSIST requests...

Directory traversal

Directory traversal vulnerability in IBM Informix Dynamic Server IDS before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable...

Code injection

Unspecified vulnerability in IBM Informix Dynamic Server IDS 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service application crash via unspecified SQONASSIST requests...

CVE-2007-5956

CVE-2007-5956 concerns IBM Informix Dynamic Server (IDS) prior to 10.00.xC7W1. The vulnerability arises from directory traversal using modified NLS message files via the DBLANG environment variable, enabling local users to gain privileges. The description specifies a local-execution/privilege-esc...