Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2753.
AI-analyzed exploit summary This exploit targets a signedness error in librpc.dll, specifically in the __lgto_svcauth_unix function, leading to a stack overflow via a crafted network packet. The PoC sends a malformed payload to trigger the vulnerability, demonstrating remote code execution potential.
Description
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.
Exploits (1)
This exploit targets a signedness error in librpc.dll, specifically in the __lgto_svcauth_unix function, leading to a stack overflow via a crafted network packet. The PoC sends a malformed payload to trigger the vulnerability, demonstrating remote code execution potential.