Vulnerabilities > IBM > Informix Client SDK

DATE CVE VULNERABILITY TITLE RISK
2009-10-13 CVE-2009-3691 Numeric Errors vulnerability in IBM Informix Client SDK and Informix Connect Runtime
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field.
network
ibm CWE-189
critical
9.3
2006-11-03 CVE-2006-5664 Local Security vulnerability in IBM products
The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files.
local
low complexity
ibm
4.6
2006-11-03 CVE-2006-5663 Local Security vulnerability in IBM products
IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.
local
low complexity
ibm
4.6