CVE-2008-0727

EPSS 5.25%
Veröffentlicht 18.03.2008 00:44:00
Zuletzt bearbeitet 16.06.2026 22:50:12
Erkennungen
Login

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 17

NVD 17 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Informix Dynamic Server Version 7.3

Ibm ≫ Informix Dynamic Server Version 7.31.xd8

Ibm ≫ Informix Dynamic Server Version 7.31.xd9

Ibm ≫ Informix Dynamic Server Version 9.3

Ibm ≫ Informix Dynamic Server Version 9.4

Ibm ≫ Informix Dynamic Server Version 9.40.tc5

Ibm ≫ Informix Dynamic Server Version 9.40.uc1

Ibm ≫ Informix Dynamic Server Version 9.40.uc2

Ibm ≫ Informix Dynamic Server Version 9.40.uc3

Ibm ≫ Informix Dynamic Server Version 9.40.uc5

Ibm ≫ Informix Dynamic Server Version 9.40.xd8

Ibm ≫ Informix Dynamic Server Version 9.40_xc7

Ibm ≫ Informix Dynamic Server Version 10.0

Ibm ≫ Informix Dynamic Server Version 10.0.xc3

Ibm ≫ Informix Dynamic Server Version 10.0.xc4

Ibm ≫ Informix Dynamic Server Version 10.00.xc7w1

Ibm ≫ Informix Dynamic Server Version 11.10.xc2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.25%	0.915

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.5	8	9.2	AV:N/AC:L/Au:S/C:N/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/29272

Vendor Advisory

http://securityreason.com/securityalert/3749

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209

http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210

http://www.securityfocus.com/archive/1/489547/100/0/threaded

http://www.securityfocus.com/archive/1/489548/100/0/threaded

http://www.securityfocus.com/bid/28198

http://www.vupen.com/english/advisories/2008/0860

http://www.zerodayinitiative.com/advisories/ZDI-08-011/

http://www.zerodayinitiative.com/advisories/ZDI-08-012/

https://exchange.xforce.ibmcloud.com/vulnerabilities/41202

https://exchange.xforce.ibmcloud.com/vulnerabilities/41203

https://nvd.nist.gov/vuln/detail/CVE-2008-0727

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0727

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0727

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-0727