critical9.3Public exploit code
CVE-2009-3691
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Informix Client SDK 3.0 - '.nfx' File Integer Overflow2009-10-05 · remote · windows · Verified
Impact
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Informix Client Sdk | Versions 3.0, 3.50 |
| Ibm | Informix Connect Runtime | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://retrogod.altervista.org/9sg_ibm_setnet32.html
- http://secunia.com/advisories/36949
- http://securitytracker.com/id?1022985
- http://www.osvdb.org/58530
- http://www.securityfocus.com/bid/36588
- http://www.vupen.com/english/advisories/2009/2834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53644
- http://retrogod.altervista.org/9sg_ibm_setnet32.html
- http://secunia.com/advisories/36949
- http://securitytracker.com/id?1022985
- http://www.osvdb.org/58530
- http://www.securityfocus.com/bid/36588
- http://www.vupen.com/english/advisories/2009/2834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53644