Vulnerabilities > CVE-2009-3470 - Resource Management Errors vulnerability in IBM Informix Dynamic Server

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

ibm

CWE-399

NVD

Published: 2009-09-29

Updated: 2009-10-03

Summary

IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long password over a JDBC connection.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Informix Dynamic Server 10.0 IBM Informix Dynamic Server 10.00.Xc1 IBM Informix Dynamic Server 10.00.Xc2 IBM Informix Dynamic Server 10.00.Xc3 IBM Informix Dynamic Server 10.00.Xc4 IBM Informix Dynamic Server 10.00.Xc5 IBM Informix Dynamic Server 10.00.Xc6 IBM Informix Dynamic Server 10.00.Xc8 IBM Informix Dynamic Server 10.00.Xc9 IBM Informix Dynamic Server 10.00.Xc10 IBM Informix Dynamic Server 11.10 IBM Informix Dynamic Server 11.10.Xc1 IBM Informix Dynamic Server 11.10.Xc2 IBM Informix Dynamic Server 11.10.Xc3 IBM Informix Dynamic Server 11.50 IBM Informix Dynamic Server 11.50.Xc1 IBM Informix Dynamic Server 11.50.Xc2 IBM Informix Dynamic Server 11.50.Xc3 IBM Informix Dynamic Server 11.50.Xc4	19

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References