FKIE_CVE-2009-2754

Vulnerability from fkie_nvd - Published: 2010-03-05 16:30 - Updated: 2025-04-11 00:51
Severity ?
Summary
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.
References
cve@mitre.orghttp://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834
cve@mitre.orghttp://secunia.com/advisories/38731Vendor Advisory
cve@mitre.orghttp://www.ibm.com/support/docview.wss?uid=swg1IC55329
cve@mitre.orghttp://www.ibm.com/support/docview.wss?uid=swg1IC55330
cve@mitre.orghttp://www.securityfocus.com/archive/1/509793/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/38472
cve@mitre.orghttp://www.vupen.com/english/advisories/2010/0508Patch, Vendor Advisory
cve@mitre.orghttp://www.vupen.com/english/advisories/2010/0509Patch, Vendor Advisory
cve@mitre.orghttp://www.zerodayinitiative.com/advisories/ZDI-10-023
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/56586
af854a3a-2127-422b-91ae-364da2661108http://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/38731Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg1IC55329
af854a3a-2127-422b-91ae-364da2661108http://www.ibm.com/support/docview.wss?uid=swg1IC55330
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/509793/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/38472
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/0508Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/0509Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-10-023
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/56586
Impacted products
Vendor Product Version
ibm informix_dynamic_server 10.0
ibm informix_dynamic_server 10.0.tc1
ibm informix_dynamic_server 10.0.xc1
ibm informix_dynamic_server 10.0.xc2e
ibm informix_dynamic_server 10.0.xc3
ibm informix_dynamic_server 10.0.xc3e
ibm informix_dynamic_server 10.0.xc4
ibm informix_dynamic_server 10.0.xc4e
ibm informix_dynamic_server 10.0.xc5
ibm informix_dynamic_server 10.0.xc5e
ibm informix_dynamic_server 10.0.xc6
ibm informix_dynamic_server 10.0.xc6e
ibm informix_dynamic_server 10.0.xc7
ibm informix_dynamic_server 10.0.xc7e
ibm informix_dynamic_server 10.0.xc8
ibm informix_dynamic_server 10.0.xc8e
ibm informix_dynamic_server 10.0.xc9
ibm informix_dynamic_server 10.0.xc9e
ibm informix_dynamic_server 10.0.xc10
ibm informix_dynamic_server 10.0.xc10e
ibm informix_dynamic_server 11.1
ibm informix_dynamic_server 11.10
ibm informix_dynamic_server 11.10.xc1
ibm informix_dynamic_server 11.10.xc1de
ibm informix_dynamic_server 11.10.xc2
ibm informix_dynamic_server 11.10.xc2e
ibm informix_dynamic_server 11.10.xc3
ibm informix_dynamic_server 11.10.xc3e
emc legato_networker *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1716E256-B186-442F-8C4C-9305E0953081",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.tc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEEBB378-F57A-4420-973F-8B641700740A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc2e:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C2380EC-4F4E-434F-9103-02BA0F8E68EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7931542-8DB8-4BC3-A319-9352EBC62158",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3e:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7252409-BAB0-41C5-8D82-09FDB751EB3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4:*:*:*:*:*:*:*",
              "matchCriteriaId": "795E3755-48D3-4A70-9AFB-1B3B9F3B8F52",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc4e:*:*:*:*:*:*:*",
              "matchCriteriaId": "97D142F8-076C-42E4-A1C3-8DDA45605340",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc5:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FB0B784-F6C0-4333-91C3-F01C23C20C72",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc5e:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F475C2E-32D9-40EF-82D5-72B827774F17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A6FFFAC-9FBD-44B7-9F12-53CF653F9F6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc6e:*:*:*:*:*:*:*",
              "matchCriteriaId": "A095762C-9A12-475A-B77A-8B5DA6333AEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc7:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EB862D4-E158-4BDD-A35D-7CF35D42561B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc7e:*:*:*:*:*:*:*",
              "matchCriteriaId": "7921875E-57C4-47D8-ADD5-E65980D2B24C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C5A7699-3614-4C07-B0D0-92C05F593A17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc8e:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BAE6B0C-7F7E-41B0-AC9D-75BED81F5878",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6770AAD-CB91-49DF-9B2D-DCFB5880C833",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc9e:*:*:*:*:*:*:*",
              "matchCriteriaId": "95E7DC6E-7A0D-4FFB-8641-1F25AAFE5D5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc10:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA609752-9DE0-4080-94FC-85337DA15757",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc10e:*:*:*:*:*:*:*",
              "matchCriteriaId": "29202E83-5F00-4200-9A36-AB06A1370E67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE53870D-832F-4300-8556-9062BCC8F9B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3398187-9A9C-4584-A186-01DB36C88219",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC21790C-D057-4B11-8D0C-202B71B1E7A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc1de:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D7F320F-72E0-440C-A300-6D85AEE86DA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "539DE4E7-8531-43E8-AE75-178BFC4324F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc2e:*:*:*:*:*:*:*",
              "matchCriteriaId": "487A81FC-FBB9-43C6-B419-4BA033054CEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "429D6E5F-E249-4EA5-B2BB-DDF3B2B20676",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:informix_dynamic_server:11.10.xc3e:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8BA02BE-9028-457F-A231-5C27BE442042",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:legato_networker:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "78A324AC-8E82-42B9-910E-9131B2AD26B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow."
    },
    {
      "lang": "es",
      "value": "Error de entero sin signo en la funcionalidad de autenticaci\u00f3n en librpc.dll en Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), tal y como se utiliza en IBM Informix Dynamic Server (IDS) v10.x anteriores a la v10.00.TC9 y v11.x anteriores a v11.10.TC3 y EMC Legato NetWorker, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un par\u00e1metro manipulado en tama\u00f1o que inicia un desbordamiento de b\u00fafer basado en la pila."
    }
  ],
  "id": "CVE-2009-2754",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-03-05T16:30:00.583",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://knowledgebase.emc.com/emcice/login.do?sType=ax1990\u0026sName=1204\u0026id=emc183834"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38731"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IC55329"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IC55330"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/509793/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/38472"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0508"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0509"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-023"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56586"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://knowledgebase.emc.com/emcice/login.do?sType=ax1990\u0026sName=1204\u0026id=emc183834"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38731"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IC55329"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ibm.com/support/docview.wss?uid=swg1IC55330"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/509793/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/38472"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0508"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2010/0509"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-023"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56586"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.