387 matches found
Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of both IBM Informix Dynamic Server and EMC Legato Networker. User interaction is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll,...
IBM Informix Dynamic Server Command Argument Processing Stack Overflow (CVE-2008-0727)
Informix is a family of relational database management system RDBMS products by IBM. It is positioned as IBM's flagship data server for online transaction processing OLTP as well as integrated solutions. IBM Informix Dynamic Server is an online transaction processing data server. A stack buffer...
Memory corruption
IBM Informix Dynamic Server IDS 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service memory corruption, assertion failure, and daemon crash by sending a long password over a JDBC connection...
CVE-2009-3470
IBM Informix Dynamic Server IDS 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service memory corruption, assertion failure, and daemon crash by sending a long password over a JDBC connection...
CVE-2009-3470
The vulnerability CVE-2009-3470 affects IBM Informix Dynamic Server (IDS) versions 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5. It allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long passwo...
CVE-2009-3470
IBM Informix Dynamic Server IDS 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service memory corruption, assertion failure, and daemon crash by sending a long password over a JDBC connection...
Informix Dynamic Server Long Password Remote Denial of Service
Binary data 5191.prm...
CVE-2009-3470: Undefined Security Weakness
IBM Informix Dynamic Server IDS 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service memory corruption, assertion failure, and daemon crash by sending a long password over a JDBC connection...
Informix Dynamic Server sqlexec password argument buffer overflow
Added: 05/09/2008 CVE: CVE-2008-0727 BID: 28198 OSVDB: 42701 Background Informix Dynamic Server is a database solution from IBM. The oninit.exe process listens for connections on port 1526/TCP. Problem The oninit.exe process does not sufficiently check the length of command-line arguments passed ...
Informix Dynamic Server sqlexec password argument buffer overflow
Added: 05/09/2008 CVE: CVE-2008-0727 BID: 28198 OSVDB: 42701 Background Informix Dynamic Server is a database solution from IBM. The oninit.exe process listens for connections on port 1526/TCP. Problem The oninit.exe process does not sufficiently check the length of command-line arguments passed ...
Informix Dynamic Server sqlexec password argument buffer overflow
Added: 05/09/2008 CVE: CVE-2008-0727 BID: 28198 OSVDB: 42701 Background Informix Dynamic Server is a database solution from IBM. The oninit.exe process listens for connections on port 1526/TCP. Problem The oninit.exe process does not sufficiently check the length of command-line arguments passed ...
Informix Dynamic Server sqlexec password argument buffer overflow
Added: 05/09/2008 CVE: CVE-2008-0727 BID: 28198 OSVDB: 42701 Background Informix Dynamic Server is a database solution from IBM. The oninit.exe process listens for connections on port 1526/TCP. Problem The oninit.exe process does not sufficiently check the length of command-line arguments passed ...
Design/Logic Flaw
Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...
Buffer overflow
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...
CVE-2008-0949
Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...
CVE-2008-0949: Undefined Security Weakness
Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...
CVE-2008-0949
CVE-2008-0949 affects IBM Informix Dynamic Server (IDS) 7.x–11.x. Multiple connected sources describe an unspecified vulnerability that allows remote attackers to gain privileged access via a malformed connection request packet, implying a remote, unauthenticated privilege escalation with potenti...
CVE-2008-0727: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server IDS 7.x through 11.x allow 1 remote attackers to execute arbitrary code via a long password and 2 remote authenticated users to execute arbitrary code via a long DBPATH value...
IBM Informix Dynamic Server多个远程溢出漏洞
BUGTRAQ ID: 28198 CVECAN ID: CVE-2008-0727,CVE-2008-0949 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server默认监听于TCP 1526端口的oninit.exe进程在认证期间没有验证DBPATH变量和用户口令的长度，如果用户提供了超长的变量名或口令的话，就可以触发缓冲区溢出，导致执行任意指令。 IBM Informix Dynamic Server 9.x IBM Informix Dynamic Server 7.x IBM...
