CVE-2010-4069

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-25 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

Affected products

IBM Informix Dynamic Server: 7.31, 9.40.tc5, 9.40.uc1, 9.40.uc2, 9.40.uc3, 9.40.uc5 (+23)

References

http://secunia.com/advisories/41914
http://www.osvdb.org/68707
http://www.vupen.com/english/advisories/2010/2735
http://www.zerodayinitiative.com/advisories/ZDI-10-217/
http://secunia.com/advisories/41914
http://www.osvdb.org/68707
http://www.vupen.com/english/advisories/2010/2735
http://www.zerodayinitiative.com/advisories/ZDI-10-217/

Get alerted when CVE-2010-4069 or the next vulnerability affects your stack