CVE-2009-2753

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-03-05 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.

Affected products

IBM Informix Dynamic Server: 10.0, 10.0.tc1, 10.0.xc1, 10.0.xc2e, 10.0.xc3, 10.0.xc3e (+22)

References

http://secunia.com/advisories/38731
http://securitytracker.com/id?1023669
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
http://www.ibm.com/support/docview.wss?uid=swg1IC55330
http://www.securityfocus.com/archive/1/509789/100/0/threaded
http://www.securityfocus.com/bid/38471
http://www.vupen.com/english/advisories/2010/0508
http://www.zerodayinitiative.com/advisories/ZDI-10-022
http://secunia.com/advisories/38731
http://securitytracker.com/id?1023669
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
http://www.ibm.com/support/docview.wss?uid=swg1IC55330

Get alerted when CVE-2009-2753 or the next vulnerability affects your stack