CVE-2008-0727

Published: Mar 18, 2008Modified: Apr 23, 2026

8.5

Vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Exploitability: 8.0 / Impact: 9.2

Source: NVD

Description

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.

Affected (17)

Products: Ibm: Informix Dynamic Server

1 product

Informix Dynamic Server

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Server	Version 10.0.xc3
Ibm Informix Dynamic Server	Version 10.0.xc4
Ibm Informix Dynamic Server	Version 10.00.xc7w1
Ibm Informix Dynamic Server	Version 10.0
Ibm Informix Dynamic Server	Version 11.10.xc2
Ibm Informix Dynamic Server	Version 7.31.xd8
Ibm Informix Dynamic Server	Version 7.31.xd9
Ibm Informix Dynamic Server	Version 7.3
Ibm Informix Dynamic Server	Version 9.3
Ibm Informix Dynamic Server	Version 9.40.tc5
Ibm Informix Dynamic Server	Version 9.40.uc1
Ibm Informix Dynamic Server	Version 9.40.uc2
Ibm Informix Dynamic Server	Version 9.40.uc3
Ibm Informix Dynamic Server	Version 9.40.uc5
Ibm Informix Dynamic Server	Version 9.40.xd8
Ibm Informix Dynamic Server	Version 9.40_xc7
Ibm Informix Dynamic Server	Version 9.4

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://secunia.com/advisories/29272

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3749

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489547/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489548/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/28198

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0860

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-011/

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-012/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41202

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41203

Source: cve@mitre.org

http://secunia.com/advisories/29272

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/3749

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/489547/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/489548/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/28198

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0860

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-08-011/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-08-012/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/41202

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/41203

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.