IBM Informix Storage Manager Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	27485
Class:	Boundary Condition Error
CVE:	CVE-2008-0768
Remote:	Yes
Local:	No
Published:	Jan 28 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The vendor disclosed these issues.
Vulnerable:	IBM Informix IDS 11.10.xC2 IBM Informix IDS 10.00.xC8
Not Vulnerable:

IBM Informix Storage Manager Multiple Buffer Overflow Vulnerabilities

IBM Informix Storage Manager is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data.

Successful exploits may allow attackers to execute arbitrary code and can lead to a complete compromise of vulnerable computers. Failed exploit attempts will likely result in denial-of-service conditions.

These issues affect IBM Informix Dynamic Server 10.00.xC8, 11.10.xC2, and prior versions on Microsoft Windows platforms.

IBM Informix Storage Manager Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Informix Storage Manager Multiple Buffer Overflow Vulnerabilities

Solution:
Reportedly, the vendor plans to release updates at the end of February and at the beginning of March 2008.

IBM Informix Storage Manager Multiple Buffer Overflow Vulnerabilities

References:

• Informix Dynamic Server (IDS) Homepage (IBM)
  
• Various stack and heap overflow problems in Informix Storage Manager (ISM) (IBM)