CVE-2012-3334 Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments i...
HighCVSS 9.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | = 11.50 | No fix listed |
| ibm informix dynamic server | = 11.50.xc1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc3w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc4w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w3 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | = 11.50.xc8w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc9 | No fix listed |
| ibm informix dynamic server | = 11.50.xc9w1 | No fix listed |
| ibm informix dynamic server | = 11.70.xc1 | No fix listed |
| ibm informix dynamic server | = 11.70.xc2 | No fix listed |
| ibm informix dynamic server | = 11.70.xc3 | No fix listed |
| ibm informix dynamic server | = 11.70.xc4 | No fix listed |
References
- 85736 vdb-entry
- www.ibm.com vendor-advisory
- 55668 vdb-entry
- ids-setcollation-bo(78277) vdb-entry