CVE-2004-2490

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Informix Dynamic Server (Ibm)
• Informix Extended Parallel Server (Ibm)

References

• http://marc.info/?l=bugtraq&m=107524391217364&w=2
• http://secunia.com/advisories/10737
• http://www-1.ibm.com/support/docview.wss?uid=swg21153336
• http://www.osvdb.org/3756
• http://www.securityfocus.com/bid/9511
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14949