CVE-2010-4053

Published: Oct 23, 2010Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

Affected (2)

Products: Ibm: Informix Dynamic Server

1 product

Informix Dynamic Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Server	Version 11.10
Ibm Informix Dynamic Server	Version 11.50

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://secunia.com/advisories/41913

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/68705

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/2734

Source: cve@mitre.org

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-216/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/62619

Source: cve@mitre.org

http://secunia.com/advisories/41913

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/68705

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/2734

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-216/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/62619

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.