CVE-2011-1033 Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment opt...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | = 11.50 | No fix listed |
References
- dvlabs.tippingpoint.com
- 43212 third-party-advisory vendor-advisory
- 8078 third-party-advisory
- 20110207 ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability mailing-list
- 46230 vdb-entry
- ADV-2011-0309 vdb-entry vendor-advisory
- zerodayinitiative.com
- ibm-informix-dynamic-oninit-bo(65209) vdb-entry