CVE-2008-0768 Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2....
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | >= 10.0, <= 10.00.xc8 | No fix listed |
| ibm informix dynamic server | >= 11.10, <= 11.10.xc2 | No fix listed |
| ibm informix storage manager | All versions | No fix listed |
References
- 28689 third-party-advisory
- www-01.ibm.com vendor-advisory
- IC55040 vendor-advisory
- IC55041 vendor-advisory
- 27485 third-party-advisory vdb-entry
- 1019281 third-party-advisory vdb-entry
- ADV-2008-0317 permissions-required vdb-entry
- ibm-ids-xdr-bo(40018) third-party-advisory vdb-entry