CVE-2009-3691 - Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field

Back Back to CVE browser

HIGH

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field

Published Oct 13, 2009

9.3

HIGH

CVSS 2.0

EPSS 7.04%

Description

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-189

References (8)

http://retrogod.altervista.org/9sg_ibm_setnet32.html
x_refsource_MISCExploit
http://secunia.com/advisories/36949
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1022985
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/58530
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/36588
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2834
vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3666
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53644
vdb-entryx_refsource_XF

Link	Providers	Tags
http://retrogod.altervista.org/9sg_ibm_setnet32.html		x_refsource_MISCExploit
http://secunia.com/advisories/36949		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1022985		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/58530		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/36588		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2834		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3666		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53644		vdb-entryx_refsource_XF