Description
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.
References
- ADV-2011-0309 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-11-050/
- 46230 vdb-entry
- 8078 third-party-advisory
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ibm
- 43212 third-party-advisory
- ibm-informix-dynamic-oninit-bo(65209) vdb-entry
- 20110207 ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability mailing-list