Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*

part: a version: 9.40.xc5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInformix Dynamic Server (3d98a141-dd35-5f26-b997-87621f9befd8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4070 vulnerable 2026-06-08 04:55:18.778358 Details available
Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.
Published: 2010-10-25T19:00:00.000Z
Updated: 2024-09-16T20:52:24.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4069 vulnerable 2026-06-08 04:55:18.764958 Details available
Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.
Published: 2010-10-25T19:00:00.000Z
Updated: 2024-09-16T22:29:41.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3862 vulnerable 2026-06-08 04:49:10.354089 Details available
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3861 vulnerable 2026-06-08 04:49:10.353486 Details available
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3858 vulnerable 2026-06-08 04:49:10.345044 Details available
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3856 vulnerable 2026-06-08 04:49:10.337009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.