Informix Dynamic Server Multiple Remote Overflows

Critical Nessus Network Monitor Plugin ID 4423

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running the Informix database server.
This version of Informix is reported to be vulnerable to a number of remote flaws. While the details of the flaw are currently unknown, it is believed that a successful attack would result in the attacker overflowing a memory buffer and either executing arbitrary code or crashing the service.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://www-306.ibm.com/software/data/informix/ids

Plugin Details

Severity: Critical

ID: 4423

File Name: 4423.prm

Family: Database

Published: 2008/03/12

Modified: 2016/01/19

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2008-0727, CVE-2008-0949

BID: 28198