Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.5

IBM Informix Dynamic Server can be hijacked via long inputs

CVE-2008-0727 · published 18 years ago
Summary

Versions 7 through 11 of IBM Informix Dynamic Server have a flaw that lets an attacker who sends an overly long password or a long database path take control of the server. This could let an outsider or a logged‑in user run their own programs on the system. Install the latest security updates from IBM and enforce strong password and configuration limits to protect your environment.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm informix_dynamic_server 7.3
7.31.xd8
7.31.xd9
9.3
9.4
9.40.tc5
9.40.uc1
9.40.uc2
9.40.uc3
9.40.uc5
9.40.xd8
9.40_xc7
5 more version ranges
cpe:2.3:a:ibm:informix_dynamic_server:7.3:*:*:*:*:*:*:*
Original advisory text
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated u...
Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrary code via a long password and (2) remote authenticated users to execute arbitrary code via a long DBPATH value.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
8.5 High
Exploitation
5% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published18 Mar 2008
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-0727 · NVD
Track software like this
Free during beta