CVE-2008-0768: Buffer Overflow
First published: Wed Feb 13 2008(Updated: )
Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Informix Dynamic Database Server | >=10.0<=10.00.xc8 | |
| IBM Informix Dynamic Database Server | >=11.10<=11.10.xc2 | |
| IBM Informix | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only
- http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only
- http://www.securitytracker.com/id?1019281
- http://secunia.com/advisories/28689
- http://www-01.ibm.com/support/docview.wss?uid=swg21294211
- http://www.securityfocus.com/bid/27485
- http://www.vupen.com/english/advisories/2008/0317
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40018
Frequently Asked Questions
What is the severity of CVE-2008-0768?
CVE-2008-0768 has a high severity due to the potential for remote code execution.
How do I fix CVE-2008-0768?
To fix CVE-2008-0768, you should update to patched versions of IBM Informix Dynamic Server beyond 10.00.xC8 and 11.10.xC2.
What systems are affected by CVE-2008-0768?
CVE-2008-0768 affects IBM Informix Dynamic Server versions 10.00.xC8 and earlier, and 11.10.xC2 and earlier as well as IBM Informix Storage Manager.
What kind of attacks can be executed through CVE-2008-0768?
CVE-2008-0768 allows attackers to execute arbitrary code via crafted XDR requests.
Is CVE-2008-0768 specific to a certain operating system?
CVE-2008-0768 is primarily associated with vulnerabilities in IBM Informix products rather than specific operating systems.
- collector/nvd-historical
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm informix dynamic database server
- version/ibm informix dynamic database server/10.0
- version/ibm informix dynamic database server/10.00.xc8
- version/ibm informix dynamic database server/11.10
- version/ibm informix dynamic database server/11.10.xc2
- canonical/ibm informix
- vendor/microsoft
- canonical/microsoft windows operating system