IBM Informix Dynamic Server Oninit Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
IBM Informix IDS 11.50.xC1
IBM Informix IDS 11.50
IBM Informix IDS 11.10.xC2W2
IBM Informix IDS 11.10.xC2
IBM Informix IDS 11.10.TC3
IBM Informix IDS 11.10
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46230

IBM Informix Dynamic Server provides the mission-critical data infrastructure required for businesses.

IBM Informix has a remote code execution vulnerability when performing a boundary check on user data. Remote attackers can exploit this vulnerability to execute arbitrary code with system-level permissions, full control of affected computers or dos.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

IBM
---
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.ers.ibm.com/