OSVDB ID: 27694

Title: IBM Informix Dynamic Server SQLIDEBUG Environment Variable Overflow

Info

Disclosure

Jul 31, 2006

Discovery

Jan 10, 2005

Dates

Exploit

Unknown

Solution

Unknown

Description

Informix Dynamic Server contains an unspecified flaw related to an overflow in the SQLIDEBUG environment variable that may allow an attacker to execute arbitrary code. No further details have been provided.

Classification

Location: Location Unknown
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 9.40.xC7, 10.00.xC3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

International Business Machines Corporation

Informix Dynamic Server

9.40.TC5
10.00.TC1

References

Credit

  • David Litchfield - davidngssoftware.com - NGSSoftware


Direct URL: http://osvdb.org/27694