9.3

CVE-2011-1033

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Informix Dynamic Server Version11.50
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.76% 0.907
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ibm
http://secunia.com/advisories/43212
Vendor Advisory
http://securityreason.com/securityalert/8078
http://www.securityfocus.com/archive/1/516250/100/0/threaded
http://www.securityfocus.com/bid/46230
http://www.vupen.com/english/advisories/2011/0309
Vendor Advisory
http://zerodayinitiative.com/advisories/ZDI-11-050/
https://exchange.xforce.ibmcloud.com/vulnerabilities/65209