Vulnerabilities > CVE-2004-2490 - Unspecified vulnerability in IBM products

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

ibm

NVD

Published: 2004-12-31

Updated: 2024-11-20

Summary

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Informix Dynamic Server 9.40.Uc2 IBM Informix Dynamic Server 9.40.Uc1 IBM Informix Extended Parallel Server 8.40_Uc1 IBM Informix Extended Parallel Server 8.40_Uc2	4

References

http://marc.info/?l=bugtraq&m=107524391217364&w=2
http://marc.info/?l=bugtraq&m=107524391217364&w=2
http://secunia.com/advisories/10737
http://secunia.com/advisories/10737
http://www.osvdb.org/3756
http://www.osvdb.org/3756
http://www.securityfocus.com/bid/9511
http://www.securityfocus.com/bid/9511
http://www-1.ibm.com/support/docview.wss?uid=swg21153336
http://www-1.ibm.com/support/docview.wss?uid=swg21153336
https://exchange.xforce.ibmcloud.com/vulnerabilities/14949
https://exchange.xforce.ibmcloud.com/vulnerabilities/14949