Title: IBM Informix Dynamic Server SQLIDEBUG Environment Variable Overflow
Info
Disclosure
Jul 31, 2006
Discovery
Jan 10, 2005
Dates
Exploit
Unknown
Solution
Unknown
Description
Informix Dynamic Server contains an unspecified flaw related to an overflow in the SQLIDEBUG environment variable that may allow an attacker to execute arbitrary code. No further details have been provided.
Classification
Location:
Location Unknown
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
Solution
Upgrade to version 9.40.xC7, 10.00.xC3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.