CVEvulnerability

CVE-2010-4069

8.5 HIGH Published 2010-10-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-10-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

Affected configurations

• ibm informix dynamic server 7.31 • ibm informix dynamic server 9.40.tc5 • ibm informix dynamic server 9.40.uc1 • ibm informix dynamic server 9.40.uc2 • ibm informix dynamic server 9.40.uc3 • ibm informix dynamic server 9.40.uc5 • ibm informix dynamic server 9.40.xc5 • ibm informix dynamic server 9.40.xc7 • ibm informix dynamic server 10.00 • ibm informix dynamic server 10.00.tc3tl • ibm informix dynamic server 10.00.xc1 • ibm informix dynamic server 10.00.xc2 • ibm informix dynamic server 10.00.xc3 • ibm informix dynamic server 10.00.xc4 • ibm informix dynamic server 10.00.xc5 • ibm informix dynamic server 10.00.xc6 • ibm informix dynamic server 10.00.xc7w1 • ibm informix dynamic server 10.00.xc8 • ibm informix dynamic server 10.00.xc9 • ibm informix dynamic server 10.00.xc10 • ibm informix dynamic server 11.10 • ibm informix dynamic server 11.10.tb4tl • ibm informix dynamic server 11.10.xc1 • ibm informix dynamic server 11.10.xc1de • ibm informix dynamic server 11.10.xc2 • ibm informix dynamic server 11.10.xc2e • ibm informix dynamic server 11.50 • ibm informix dynamic server 11.50.xc1 • ibm informix dynamic server 11.50.xc2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References