Vulnerability CVE-2009-2754
Published: 2010-03-05   Modified: 2012-02-13

Description:
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.

See advisories in our WLB2 database:
Topic
Author
Date
High
Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability
ZDI
07.03.2010

Type:

CWE-189

 (Numeric Errors)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
IBM -> Informix dynamic server 
EMC -> Legato networker 

 References:
http://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
http://www.ibm.com/support/docview.wss?uid=swg1IC55330
http://www.securityfocus.com/archive/1/509793/100/0/threaded
http://www.securityfocus.com/bid/38472
http://www.vupen.com/english/advisories/2010/0508
http://www.vupen.com/english/advisories/2010/0509
http://www.zerodayinitiative.com/advisories/ZDI-10-023
https://exchange.xforce.ibmcloud.com/vulnerabilities/56586
Copyright 2024, cxsecurity.com

 

Back to Top