Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2009-3691: IBM Informix SDK and Connect Runtime enable remote code execution

CVE-2009-3691 · published 17 years ago

Summary

The setnet32.exe program that comes with the IBM Informix Client SDK and Informix Connect Runtime can be tricked by a specially crafted .nfx file to run any code an attacker wants. This happens because the program miscalculates certain values, causing it to overflow and overwrite memory. Apply the latest patches from IBM and avoid opening .nfx files from unknown sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ibm	informix_client_sdk	3.0 3.50 `cpe:2.3:a:ibm:informix_client_sdk:3.0:::::::*`
ibm	informix_connect_runtime	3.0 `cpe:2.3:a:ibm:informix_connect_runtime:3.0:::::::*`

Original advisory text

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field. NOTE: some of these details are obtained from third party information.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.3 Critical

Exploitation

7% chance of attack within 30 days

Type

CWE-189Numeric Errors

Timeline

Published13 Oct 2009

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2009-3691 · NVD

Track software like this

Free during beta