Vulnerabilities > CVE-2010-4070 - Numeric Errors vulnerability in IBM Informix Dynamic Server

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

ibm

CWE-189

NVD

Published: 2010-10-25

Updated: 2024-11-21

Summary

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Informix Dynamic Server 9.40.Uc3 IBM Informix Dynamic Server 9.40.Uc2 IBM Informix Dynamic Server 9.40.Xc7 IBM Informix Dynamic Server 11.50 IBM Informix Dynamic Server 9.40.Tc5 IBM Informix Dynamic Server 11.10 IBM Informix Dynamic Server 9.40.Xc5 IBM Informix Dynamic Server 9.40.Uc1 IBM Informix Dynamic Server 10.00.Xc3 IBM Informix Dynamic Server 10.00.Xc9 IBM Informix Dynamic Server 10.00.Xc6 IBM Informix Dynamic Server 10.00.Xc1 IBM Informix Dynamic Server 10.00.Xc4 IBM Informix Dynamic Server 11.10.Xc1 IBM Informix Dynamic Server 10.00.Xc10 IBM Informix Dynamic Server 10.00.Tc3Tl IBM Informix Dynamic Server 10.00 IBM Informix Dynamic Server 10.00.Xc7W1 IBM Informix Dynamic Server 11.10.Xc1De IBM Informix Dynamic Server 11.10.Tb4Tl IBM Informix Dynamic Server 10.00.Xc2 IBM Informix Dynamic Server 10.00.Xc8 IBM Informix Dynamic Server 10.00.Xc5 IBM Informix Dynamic Server 7.31 IBM Informix Dynamic Server 9.40.Uc5	25

Common Weakness Enumeration (CWE)

CWE-189 - Numeric Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References