Unscored severity · published Mar 5, 2010
CVE-2009-2754
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix…
–
CVSS
40.1%
EPSS
No
On KEV
Description
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)40.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Informix Dynamic Server · Ibm
10.0; 10.0.tc1; 10.0.xc1; 10.0.xc2e; 10.0.xc3; 10.0.xc3e; +22 more · source: NVD
LN
Legato Networker · Emc
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2754
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2754
knowledgebase.emc.com
http://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834
Vendor Advisory
http://secunia.com/advisories/38731
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1IC55330
www.securityfocus.com
http://www.securityfocus.com/archive/1/509793/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/38472
More from Legato Networker
–
CVE-2007-3618
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or…
–
CVE-2005-3658
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1…
–
CVE-2005-3659
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise…
–
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to…
–
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and…