CVE-2010-4053

IBM Informix Dynamic Server 11.10-11.50 - Authenticated Stack-Based Buffer Overflow via EXPLAIN Directive

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

References (5)

Core 5
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-216/
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2734
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/68705
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41913
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/62619

Scores

EPSS 0.0467
EPSS Percentile 90.7%

Details

CWE
CWE-119
Status published
Products (2)
ibm/informix_dynamic_server 11.10
ibm/informix_dynamic_server 11.50
Published Oct 23, 2010
Tracked Since Feb 18, 2026