Security Bulletin: TLS padding vulnerability affects Informix Dynamic Server ( CVE-2014-8730)

Summary IBM Informix Dynamic Server can be affected by a TLS Transport Layer Security padding vulnerability which can allow a remote attacker to obtain sensitive information. Vulnerability Details The following vulnerability affects IBM Informix Dynamic Server. CVEID: CVE-2014-8730 DESCRIPTION: I...

Security Bulletin: IBM Informix Client SDK CPU utilization (CVE-2014-0963)

Summary Informix Client SDK is affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: Informix Client SDK is affected by a problem with the handling of...

Security Bulletin: Potential SSL/TLS-related denial of service vulnerability in IBM Informix Client SDK (CVE-2013-6329)

Summary Informix Client SDK is impacted by a vulnerability in IBM's GSKIT library which can result in a denial of service caused by an error in SSL/TLS handshake processing related to session resumption when using SSLv2. A remote attacker could exploit this vulnerability to cause the system to...

CVE-2009-3691

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

Integer overflow

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

CVE-2009-3691

CVE-2009-3691 affects IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x. A crafted .nfx file with manipulated HostSize (and possibly ProtoSize/ServerSize) triggers a stack-based buffer overflow in HostList, enabling remote code execution or crashes. Connected advisories confir...

CVE-2009-3691

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

IBM Informix Client SDK 3.0 SetNet32 File Integer Overflow

?php / IBM Informix Client SDK 3.0 SetNet32 File .nfx Hostsize integer overflow exploit 2k3 sp0 by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ vulnerable packages: IBM Informix Client SDK 3.0, IBM Informix Connect Runtime 3.x, possibly other products carrying the setnet32...