CVE-2012-3334

CVE-2012-3334 affects IBM Informix Dynamic Server (IDS) 11.50 prior to 11.50.xC9W2 and 11.70 prior to 11.70.xC5. The vulnerability is a stack-based buffer overflow in processing arguments to the SET COLLATION statement, which can enable remote authenticated code execution with the database server...

Authentication Capture: DRDA (DB2, Informix, Derby)

This module provides a fake DRDA DB2, Informix, Derby server that is designed to capture authentication credentials. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

IBM Informix Dynamic Server Buffer Overflow Vulnerability (Oct 2010) - Linux

IBM Informix Dynamic Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability (Linux)

This host is installed with IBM Informix Dynamic Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibminformixdynamicserveroninitbofvulnlin.nasl 5888 2017-04-07 09:01:53Z teissa $ IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability Linux...

IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability (Windows)

This host is installed with IBM Informix Dynamic Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibminformixdynamicserveroninitbofvulnwin.nasl 5888 2017-04-07 09:01:53Z teissa $ IBM Informix Dynamic Server 'oninit.exe' Buffer Overflow Vulnerability Windows...

IBM Informix Dynamic Server Buffer Overflow Vulnerability (Oct 2010) - Windows

IBM Informix Dynamic Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenAdmin Tool for Informix informixserver Parameter XSS

The instance of OpenAdmin Tool for Informix hosted on the remote web server fails to sanitize user input to the 'informixserver' parameter of its 'index.php' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or script...

OpenAdmin Tool Detection

The remote web server hosts OpenAdmin Tool for Informix OAT, a PHP- based administration tool for managing Informix database servers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56171; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2011-3390

Multiple cross-site scripting XSS vulnerabilities in index.php in IBM OpenAdmin Tool OAT before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the 1 informixserver, 2 host, or 3 port parameter in a login action...

CVE-2011-3390

IBM Open Admin Tool (OAT) for Informix is affected by XSS in index.php prior to version 2.72. The vulnerability arises from insufficient input sanitization of the login action’s parameters (informixserver, host, port), enabling arbitrary script/HTML injection in a user’s browser. Mitigation: upgr...

IBM Open Admin Tool 2.27 Cross Site Scripting

“XSS in IBM Open Admin Tool OAT2.27installwindows.exe” Product version tested : OAT v2.27 Vendore has been informed : July 27, 2010 They fix the vulnerability on : March 2011 Fixed version: OAT v2.72 Credit : sumit kumar soni [email protected] Product Link:...

XSS in IBM Open Admin Tool

“XSS in IBM Open Admin Tool OAT2.27installwindows.exe” Product version tested : OAT v2.27 Vendore has been informed : July 27, 2010 They fix the vulnerability on : March 2011 Fixed version: OAT v2.72 Credit : sumit kumar soni [email protected] Product Link:...

IBM Informix Dynamic Server RCE Vulnerability (Feb 2011) - Windows

IBM Informix Dynamic Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Informix Dynamic Server Version Detection (Linux)

This script finds the installed IBM Informix Dynamic Server version and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodibminformixdynamicserverdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ IBM Informix Dynamic Server Version Detection Linux Authors: Sooraj KS Copyright:...

IBM Informix Dynamic Server Oninit Remote Code Execution Vulnerability (Linux)

This host is installed with IBM Informix Dynamic Server and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodibminformixdynamicservercodeexecvulnlin.nasl 7019 2017-08-29 11:51:27Z teissa $ IBM Informix Dynamic Server Oninit Remote Code Execution Vulnerability...

IBM Informix Dynamic Server Detection (Windows SMB Login)

SMB login-based detection of IBM Informix Dynamic Server. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...

IBM Informix Dynamic Server Detection (Linux/Unix SSH Login)

SSH login-based detection of IBM Informix Dynamic Server. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Informix Dynamic Server Oninit Remote Code Execution Vulnerability (Windows)

This host is installed with IBM Informix Dynamic Server and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodibminformixdynamicservercodeexecvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ IBM Informix Dynamic Server Oninit Remote Code Execution Vulnerability...

IBM Informix Dynamic Server RCE Vulnerability (Feb 2011) - Linux

IBM Informix Dynamic Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nmap NSE net: informix-query

Runs a query against IBM Informix Dynamic Server using the given authentication credentials see also: informix-brute. SYNTAX: informix.instance: specifies the Informix instance to connect to informix-query.database: The name of the database to connect to default: sysmaster informix-query.username...