768 matches found
Informix Long Username Buffer Overflow Vulnerability
NGSSoftware Insight Security Research Advisory Name: Informix Long Username Buffer Overflow Vulnerability Systems Affected: Informix 9.40.xC6 and earlier, 10.00.xC2 and earlier Severity: Critical Vendor URL: http://www.ibm.com/ Author: David Litchfield [email protected] Date of Public...
Informix: Discovery, Attack,and Defense
CHAPTER 11 Informix: Discovery, Attack, and Defense Attacking and Defending Informix Informix, by default, listens on TCP port 1526. When doing a TCP port scan and seeing that 1526 is open on a server one could be forgiven for thinking it's running Oracle, since Oracle can also often be found...
CVE-2006-3856
IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service crash via unspecified vectors...
CVE-2006-3853
Buffer overflow in IBM Informix Dynamic Server IDS before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username...
CVE-2006-3858
IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...
CVE-2006-3862
Buffer overflow in IBM Informix Dynamic Server IDS 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable envariable...
CVE-2006-3855
The ifxloadinternal function in IBM Informix Dynamic Server IDS allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."...
CVE-2006-3861
IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases...
CVE-2006-3857
Multiple buffer overflows in IBM Informix Dynamic Server IDS before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via 1 the getname function, as used by a sqremview, b sqremproc, c sqremperms, d sqdistfetch, and e sqdcatalog; and the 2 SET DEBUG...
CVE-2006-3857
CVE-2006-3857 involves multiple buffer overflow vulnerabilities in IBM Informix Dynamic Server (IDS) prior to 9.40.TC6 and 10.00 prior to 10.00.TC3. The overflows occur in the protocol path via the getname() function (used by _sq_remview, _sq_remproc, _sq_remperms, _sq_distfetch, _sq_dcatalog) an...
CVE-2006-3861
IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases...
CVE-2006-3855
The ifxloadinternal function in IBM Informix Dynamic Server IDS allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."...
CVE-2006-3858
IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...
CVE-2006-3862
Buffer overflow in IBM Informix Dynamic Server IDS 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable envariable...
CVE-2006-3855
Affected product: IBM Informix Dynamic Server (IDS). Vulnerability: The ifx_load_internal function allows remote authenticated users to load an arbitrary library and execute code via DllMain (Windows) or _init (Linux) when the library is loaded, enabling arbitrary C code execution. This constitut...
CVE-2006-3862
CVE-2006-3862: Buffer overflow in IBM Informix Dynamic Server (IDS) allowing arbitrary code execution via the SQLIDEBUG environment variable. Affected versions: IDS 9.40.TC5–9.40.xC7 and 10.00.TC1–10.00.xC3. Exploitation status is not stated in the provided documents; no remediation details are g...
CVE-2006-3858
CVE-2006-3858 affects IBM Informix Dynamic Server (IDS) prior to 9.40.xC8 and 10.00 prior to 10.00.xC4. The flaw causes passwords to be stored in plaintext in a shared memory region, enabling local users to read memory and obtain passwords. Affected products include IDS versions before the stated...
CVE-2006-3861
IBM Informix Dynamic Server (IDS) is affected by CVE-2006-3861. Affected versions are IDS 9.40.xC6 and earlier and 10.00.xC2/C1 before 9.40.xC7 and 10.00.xC3, where the product does not enforce database creation permissions. This allows remote authenticated users to create arbitrary databases, po...
CVE-2006-3853
CVE-2006-3853: Buffer overflow in IBM Informix Dynamic Server (IDS) on Windows allows remote code execution via a long username. Affected IDS versions are before 9.40.TC7 and before 10.00.TC3. The issue arises from unsafe handling of long usernames; there is no public remediation detail in the pr...