CVE-2009-4240

Published: Dec 9, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors.

Affected (1)

Products: Ibm: Infosphere Information Server

Ibm

1 product

Infosphere Information Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Information Server	Version 8.1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://secunia.com/advisories/37556

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1JR30394

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=swg21406224

Source: cve@mitre.org

http://www.osvdb.org/60807

Source: cve@mitre.org

http://www.securityfocus.com/bid/37245

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3432

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/54609

Source: cve@mitre.org

http://secunia.com/advisories/37556