Informix Dynamic Server Multiple Remote Overflows

critical Nessus Network Monitor Plugin ID 4423

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running the Informix database server.
This version of Informix is reported to be vulnerable to a number of remote flaws. While the details of the flaw are currently unknown, it is believed that a successful attack would result in the attacker overflowing a memory buffer and either executing arbitrary code or crashing the service.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Critical

ID: 4423

Family: Database

Published: 3/12/2008

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:informix_dynamic_server

Reference Information

CVE: CVE-2008-0727, CVE-2008-0949

BID: 28198

Detections

Analytics