Description
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
References
- http://www-1.ibm.com/support/docview.wss?uid=swg21242921
- 20060814 Informix Long Username Buffer Overflow Vulnerability mailing-list
- 20060814 Informix - Discovery, Attack and Defense mailing-list
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
- 27685 vdb-entry
- 21301 third-party-advisory
- 19264 vdb-entry
- informix-username-bo(28122) vdb-entry
- ADV-2006-3077 vdb-entry