National Cyber-Alert System

Vulnerability Summary for CVE-2008-0727

Overview

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.

Description

All IBM links require software support sign in to view.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: ibm-informix-oninit-bo(41203)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41203

External Source: XF

Name: ibm-informix-oninit-dbpath-bo(41202)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41202

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-08-012/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-08-012/

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-08-011/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-08-011/

External Source: BID

Name: 28198

Hyperlink:http://www.securityfocus.com/bid/28198

External Source: BUGTRAQ

Name: 20080313 ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/489548/100/0/threaded

External Source: BUGTRAQ

Name: 20080313 ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/489547/100/0/threaded

External Source: VUPEN

Name: ADV-2008-0860

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/0860

External Source: AIXAPAR

Name: IC55210

Hyperlink:http://www-1.ibm.com/support/docview.wss?uid=swg1IC55210

External Source: AIXAPAR

Name: IC55209

Hyperlink:http://www-1.ibm.com/support/docview.wss?uid=swg1IC55209

External Source: AIXAPAR

Name: IC55208

Hyperlink:http://www-1.ibm.com/support/docview.wss?uid=swg1IC55208

External Source: AIXAPAR

Name: IC55207

Hyperlink:http://www-1.ibm.com/support/docview.wss?uid=swg1IC55207

External Source: SECUNIA

Name: 29272

Type: Advisory

Hyperlink:http://secunia.com/advisories/29272

External Source: SREASON

Name: 3749

Hyperlink:http://securityreason.com/securityalert/3749