This host is installed with IBM Informix Dynamic Server and is prone to buffer overflow vulnerability.

Successful exploitation could allow remote attackers to execute arbitrary code with SYSTEM-level privileges. Impact Level: System/Application

Upgrade to IBM Informix IDS version 11.50.xC1, 11.10.xC2W2 or later. For updates refer to http://www-01.ibm.com/software/data/informix/

The flaw is due to a boundary error within the logging function in oninit.exe and can be exploited to cause a stack-based buffer overflow by sending a specially crafted request to TCP ports 9088 or 1526.

IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1

• http://osvdb.org/68705
• http://secunia.com/advisories/41913
• http://www.zerodayinitiative.com/advisories/ZDI-10-216
• http://xforce.iss.net/xforce/xfdb/62619

---

Updated on 2015-03-25