PT-2009-5950 · Ibm · Informix Connect Runtime+1

Published 2009-10-13 · Updated 2017-08-17 · CVE-2009-3691

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Informix Client SDK versions 3.0 through 3.50 Informix Connect Runtime versions 3.x

Description The issue is related to multiple integer overflows in the setnet32.exe file, which can be exploited by remote attackers to execute arbitrary code. This can be achieved by using a crafted .nfx file with specific field values, such as HostSize, ProtoSize, and ServerSize, that trigger a stack-based buffer overflow involving a crafted HostList field.

Recommendations For IBM Informix Client SDK versions 3.0 through 3.50, update to a version that fixes the integer overflows in setnet32.exe. For Informix Connect Runtime versions 3.x, update to a version that fixes the integer overflows in setnet32.exe. As a temporary workaround, consider restricting access to the setnet32.exe file to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-3691

Affected Products

Ibm Informix Client Sdk

Informix Connect Runtime

References · 9

• 🔥 http://retrogod.altervista.org/9sg_ibm_setnet32.html · Exploit
• 🔥 https://exploit-db.com/exploits/10070 · Exploit
• http://vupen.com/english/advisories/2009/2834 · Vendor Advisory
• http://secunia.com/advisories/36949 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3691 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53644 · Note
• http://securitytracker.com/id?1022985 · Note
• http://osvdb.org/58530 · Note
• http://securityfocus.com/bid/36588 · Note