Lucene search

K
cveMitreCVE-2004-2131
HistoryMay 27, 2005 - 4:00 a.m.

CVE-2004-2131

2005-05-2704:00:00
mitre
web.nvd.nist.gov
27
cve-2004-2131
stack-based buffer overflow
ibm informix dynamic server
ids
nvd
buffer overflow
security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0

Percentile

0.4%

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.

Affected configurations

Nvd
Node
ibminformix_dynamic_serverMatch9.40.uc1
OR
ibminformix_dynamic_serverMatch9.40.uc2
OR
ibminformix_extended_parallel_serverMatch8.40_uc1
VendorProductVersionCPE
ibminformix_dynamic_server9.40.uc1cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
ibminformix_dynamic_server9.40.uc2cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
ibminformix_extended_parallel_server8.40_uc1cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc1:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0

Percentile

0.4%

Related for CVE-2004-2131