Short Name |
APP:IBM:INFORMIX-EXPLAIN |
---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
IBM Informix Dynamic Server oninit.exe EXPLAIN Stack Buffer Overflow |
Release Date |
2010/11/11 |
Update Number |
1813 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known stack buffer overflow in IBM Informix Dynamic Server Database. It is caused by insufficient checks within a logging function of the oninit.exe process. Remote authenticated attackers can exploit this by sending a crafted SET EXPLAIN command to the target server. A successful attack requires credentials to remotely connect to a vulnerable database server. An attacker can overflow the stack buffer allowing execution of arbitrary code with the privileges of the affected service. An unsuccessful attemp can result in a denial of service for the database.
IBM Informix is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue may allow an attacker to execute arbitrary code with SYSTEM-level privileges, completely compromising affected computers. Failed exploit attempts will result in a denial-of-service condition.