CVE-2008-0727

Опубликовано: 18 мар. 2008

Источник: nvd

CVSS2: 8.5

EPSS Средний

Описание

Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.

Комментарий

All IBM links require software support sign in to view.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:informix_dynamic_server:7.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:7.31.xd9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.xd8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40_xc7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc7w1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.26903

Средний

8.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-wfrp-xv66-pmxj

github

почти 4 года назад