Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*

part: a version: 10.0.xc1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInformix Dynamic Server (3d98a141-dd35-5f26-b997-87621f9befd8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2754 vulnerable 2026-06-08 04:51:30.360062 Details available
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-08-07T05:59:57.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2753 vulnerable 2026-06-08 04:51:30.341997 Details available
Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-08-07T05:59:57.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3862 vulnerable 2026-06-08 04:49:10.355919 Details available
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3861 vulnerable 2026-06-08 04:49:10.353519 Details available
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3858 vulnerable 2026-06-08 04:49:10.345092 Details available
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3856 vulnerable 2026-06-08 04:49:10.337832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.