CVE-2009-2753 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2009-2753

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-05 Mar, 2010 | 16:30

Updated At-11 Apr, 2025 | 00:51

Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

IBM Corporation

>>informix_dynamic_server>>10.0

cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.tc1

cpe:2.3:a:ibm:informix_dynamic_server:10.0.tc1:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc1

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc2e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc2e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc3

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc3e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc4

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc4e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc5

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc5:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc5e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc5e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc6

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc6:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc6e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc6e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc7

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc7:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc7e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc7e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc8

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc8:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc8e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc8e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc9

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc9:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc9e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc9e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc10

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc10:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>10.0.xc10e

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc10e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.1

cpe:2.3:a:ibm:informix_dynamic_server:11.1:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10

cpe:2.3:a:ibm:informix_dynamic_server:11.10:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc1

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc1de

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1de:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc2

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc2e

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2e:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc3

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3:*:*:*:*:*:*:*

IBM Corporation

>>informix_dynamic_server>>11.10.xc3e

cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3e:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/38731	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1023669	cve@mitre.org	N/A
http://www.ibm.com/support/docview.wss?uid=swg1IC55329	cve@mitre.org	N/A
http://www.ibm.com/support/docview.wss?uid=swg1IC55330	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/509789/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/38471	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/0508	cve@mitre.org	Patch Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-022	cve@mitre.org	N/A
http://secunia.com/advisories/38731	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1023669	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ibm.com/support/docview.wss?uid=swg1IC55329	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ibm.com/support/docview.wss?uid=swg1IC55330	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/509789/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/38471	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/0508	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-10-022	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/38731

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023669

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg1IC55329

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg1IC55330

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/509789/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38471

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0508

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-10-022

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/38731

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023669

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg1IC55329

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.ibm.com/support/docview.wss?uid=swg1IC55330

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/509789/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38471

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0508

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-10-022

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A