669 matches found
Design/Logic Flaw
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the 1 nsrd, 2 nsrexecd, and 3 portmap executable files, which allows local users to gain privileges via a Trojan horse file...
CVE-2016-0226
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the 1 nsrd, 2 nsrexecd, and 3 portmap executable files, which allows local users to gain privileges via a Trojan horse file...
CVE-2016-0226
Mode C: IBM Informix Dynamic Server (Windows client 11.70.xCn) is affected by a local privilege escalation vulnerability. The issue stems from weak access control that allows modification of the nsrd, nsrexecd, and portmap service binaries, enabling a local user to gain SYSTEM-level privileges vi...
CVE-2016-0226
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the 1 nsrd, 2 nsrexecd, and 3 portmap executable files, which allows local users to gain privileges via a Trojan horse file...
IBM Informix portmap Service Privilege Escalation Vulnerability
This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the...
IBM Informix nsrexecd Service Privilege Escalation Vulnerability
This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the...
IBM Informix nsrd Service Privilege Escalation Vulnerability
This vulnerability allows local users to execute arbitrary code on vulnerable installations of IBM Informix. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within configuration of the nsr...
IBM Informix Dynamic Server Arbitrary Code Execution Vulnerability
IBM Informix Dynamic Server is a scalable object-relational database server that provides clustered data centers with capabilities such as continuous data availability and disaster recovery. A security vulnerability in IBM IDS for Windows-based platforms allows local attackers to exploit the...
IBM Informix Client NFX Buffer Overflow - Ver2 (CVE-2009-3691)
A buffer overflow vulnerability has been reported in IBM Informix Client Software Development Kit and Ibm Informix Connect Runtime. An attacker could exploit this vulnerability via a .nfx file with a crafted HostSize, and possibly ProtoSize and ServerSize, field that triggers a stack-based buffer...
Informix Server GSKit 7.x <= 7.0.4.47 / 8.0.50.x <= 8.0.50.13 X.509 Certificate Chain DoS
The remote Informix server ships with a version of IBM's Global Security kit GSKit library that is affected by a denial of service vulnerability. A remote attacker can exploit this issue via malformed X.509 certificate chain to cause the host to become unresponsive. Note that this plugin only...
Informix Server GSKit 7.x < 7.0.4.50 / 8.0.50.x < 8.0.50.20 SSL CPU Utilization DoS
The remote Informix server ships with a version of IBM's Global Security kit GSKit library that is affected by a denial of service vulnerability. A remote attacker can exploit this issue by sending a specially crafted SSL request to cause the host to become unresponsive. C Tenable Network Securit...
IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)
A buffer overflow vulnerability has been reported in IBM Informix Dynamic Database Server. An attacker could exploit this vulnerability via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. Successful exploitation of this vulnerability could all...
IBM Informix SE 7.25 sqlexec Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string copy of the INFORMIXD...
IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 Multiple Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exists in the onedcu binary. Specifically, when the binary is invoked a...
Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability
No description provided by source. Exploit Title: ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability Date: 2010-04-08 Author: ZSploit.com Software Link: N/A Version: N/A Tested on: IBM Informix Dynamic Server 10.0 CVE : CVE-2009-2754 ! /usr/bin/env python...
IBM Informix SE 7.25 sqlexec Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/4891/info Informix is an enterprise database distributed and maintained by IBM. A buffer overflow vulnerability has been reported for Informix-SE for Linux. The overflow is due to an unbounded string copy of the INFORMIXD...
IBM Informix Web Datablade 4.1x Page Request SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4496/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL, dynamically generates HTML content based on Database data. Web Datablade is available for Apache,...
Informix Webdriver 1.0 - Remote Administration Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2166/info Informix Webdriver, the web-to-DB interface used by Informix database products, may permit unauthorized remote access to the system's administration functions. Under very specific circumstances, if webdriver is...
IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 Multiple Vulnerabilities (1)
No description provided by source. source: http://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exists in the onedcu binary. Specifically, when the binary is invoked a...
ibm informix web datablade 3.x/4.1 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3575/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL is used to provide wbBinaries for storing large binary resources such as images, sounds, etc. The W...