IBM Informix Dynamic Server Multiple Remote Vulnerabilities
BID:28198
Info
IBM Informix Dynamic Server Multiple Remote Vulnerabilities
| Bugtraq ID: | 28198 |
| Class: | Unknown |
| CVE: |
CVE-2008-0727 CVE-2008-0949 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 11 2008 12:00AM |
| Updated: | Apr 18 2008 12:28AM |
| Credit: | The vendor credits MWR InfoSecurity and Zero Day Initiative with the discovery of these vulnerabilities. |
| Vulnerable: |
IBM Informix IDS 9.40 .UC3 IBM Informix IDS 9.40 .UC2 IBM Informix IDS 9.40 .UC1 IBM Informix IDS 9.3 IBM Informix IDS 9.40.xD8 IBM Informix IDS 9.40.UC5 IBM Informix IDS 9.40.TC5 IBM Informix IDS 9.40 IBM Informix IDS 9.4 IBM Informix IDS 7.31 .xD9 IBM Informix IDS 7.31 .xD8 IBM Informix IDS 7.3 IBM Informix IDS 11.10.xC2 IBM Informix IDS 11.10 IBM Informix IDS 10.00.xC8 IBM Informix IDS 10.00.xC7W1 IBM Informix IDS 10.0.xC4 IBM Informix IDS 10.0 xC3 IBM Informix IDS 10.0 |
| Not Vulnerable: | |
Discussion
IBM Informix Dynamic Server Multiple Remote Vulnerabilities
IBM Informix Dynamic Server is prone to multiple remote vulnerabilities:
- Two buffer-overflow vulnerabilities.
- An unspecified vulnerability when handling malformed packets.
An attacker can exploit these issues to execute arbitrary code with superuser privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will cause denial-of-service conditions.
IBM Informix Dynamic Server is prone to multiple remote vulnerabilities:
- Two buffer-overflow vulnerabilities.
- An unspecified vulnerability when handling malformed packets.
An attacker can exploit these issues to execute arbitrary code with superuser privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will cause denial-of-service conditions.
Exploit / POC
IBM Informix Dynamic Server Multiple Remote Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM Informix Dynamic Server Multiple Remote Vulnerabilities
Solution:
The vendor released updates to address these issues. Please see the references for more information.
Solution:
The vendor released updates to address these issues. Please see the references for more information.
References
IBM Informix Dynamic Server Multiple Remote Vulnerabilities
References:
References:
- Informix Dynamic Server (IDS) Homepage (IBM)
- ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability (Zero Day Initiative)
- ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow V (Zero Day Initiative)
- ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability ([email protected] )
- ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow V ([email protected])
- IBM Informix Pre-Authentication Stack Overflow (MWR InfoSecurity)
- IBM Support Document swg1IC55207 (IBM)
- IBM Support Document swg1IC55208 (IBM)
- IBM Support Document swg1IC55209 (IBM)
- IBM Support Document swg1IC55210 (IBM)
- IBM Support Document swg1IC55223 (IBM)
- IBM Support Document swg1IC55224 (IBM)
- IBM Support Document swg1IC55225 (IBM)