VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-4053
informix_dynamic_server: Stack-based buffer overflow in an unspecified loggi...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4053

Original

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-10-23
Source Information Category:
Advisory, Alert
Last Updated:
2010-10-25




Affected Product Tags
cpe:/a:ibm:informix_dynamic_server:11.10
cpe:/a:ibm:informix_dynamic_server:11.50
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
X Single [?]
None [?]
[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
Alternatives




References
MISC http://www.zerodayinitiative.com/advisories/ZDI-10-216/




OSVDB 68705




SECUNIA 41913




VUPEN ADV-2010-2734




Vulnerability Type Buffer Errors (CWE-119)




XF ibm-ids-oninit-bo(62619)




Copyright © 2010 JPCERT/CC All Rights Reserved.