PT-2008-2386 · Ibm · Ibm Informix Dynamic Server

Publicado 2008-02-13 · Atualizado 2019-08-01 · CVE-2008-0768

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Informix Dynamic Server (IDS) versions 10.00.xC8 and earlier Informix Dynamic Server (IDS) versions 11.10.xC2 and earlier

Description The issue concerns multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS). This allows attackers to execute arbitrary code via crafted XDR requests.

Recommendations For Informix Dynamic Server (IDS) versions 10.00.xC8 and earlier, update to a version later than 10.00.xC8 to resolve the issue. For Informix Dynamic Server (IDS) versions 11.10.xC2 and earlier, update to a version later than 11.10.xC2 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0768

Produtos afetados

Ibm Informix Dynamic Server

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-0768 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40018 · Nota
• http://vupen.com/english/advisories/2008/0317 · Nota
• http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only · Aviso do Fabricante
• http://securitytracker.com/id?1019281 · Nota
• http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only · Aviso do Fabricante
• http://secunia.com/advisories/28689 · Nota
• http://securityfocus.com/bid/27485 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21294211 · Aviso do Fabricante