Description
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.
References
- ADV-2008-0860 vdb-entry
- ibm-informix-oninit-bo(41203) vdb-entry
- 28198 vdb-entry
- 20080313 ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability mailing-list
- ibm-informix-oninit-dbpath-bo(41202) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-012/
- IC55208 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-011/
- 20080313 ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability mailing-list
- IC55210 vendor-advisory
- IC55207 vendor-advisory
- IC55209 vendor-advisory
- 29272 third-party-advisory
- 3749 third-party-advisory