Login Request a demo
Unscored severity · published Feb 13, 2008
CVE-2008-0768
Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Informix Dynamic Server · Ibm
10.0 through 10.00.xc8; 11.10 through 11.10.xc2 · source: NVD
IS
Informix Storage Manager · Ibm
All versions, or not specified · source: NVD
Affected product
ID
Informix Dynamic Server
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0768
Third Party Advisory
http://secunia.com/advisories/28689
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21294211
Vendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only
Vendor Advisory
http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only
Third Party Advisory
http://www.securityfocus.com/bid/27485
Third Party Advisory
http://www.securitytracker.com/id?1019281
More from Informix Dynamic Server
8.8
CVE-2026-13361
IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution
7.8
CVE-2026-13367
IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility
7.8
CVE-2024-45675
IBM Informix Dynamic Server Authentication Bypass
7.8
CVE-2023-28523
IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary…
7.8
CVE-2020-4799
IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability