CVE-2010-4070

Опубликовано: 25 окт. 2010

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Ссылки

http://secunia.com/advisories/41915
Vendor Advisory
http://www.osvdb.org/68706
http://www.vupen.com/english/advisories/2010/2733
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-215/
http://secunia.com/advisories/41915
Vendor Advisory
http://www.osvdb.org/68706
http://www.vupen.com/english/advisories/2010/2733
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-215/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:informix_dynamic_server:7.31:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.tc3tl:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc7w1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.00.xc10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.10.tb4tl:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1de:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:11.50:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.0805

Низкий

10 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-9g6c-7623-rww7

github

больше 3 лет назад