CVE-2011-1033 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Informix Dynamic Server

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents4 sources
Severity
9.3CRITICALNVD
EPSS
28.4%
top 3.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Informix Dynamic Server
Timeline
PublishedFeb 15
Latest updateMay 14

Description

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2mr4-86fw-5c9r: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11↗2022-05-14
▶
CVEList
CVE-2011-1033: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11↗2011-02-14
▶

💥Exploits & PoCs

2
Exploit-DB
NetSarang Xlpd Printer Daemon 4 - Denial of Service↗2012-02-02
▶
Exploit-DB
Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities↗2011-08-09
▶
CVE-2011-1033 — IBM vulnerability | cvebase