| The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them. |
|
 |
|
|
Computer vulnerabilities of IBM Informix Server
IBM Informix Dynamic Server: privilege escalation
Synthesis of the vulnerability
An attacker can bypass restrictions of IBM Informix Dynamic Server, in order to escalate his privileges.
Impacted products: Informix Server.
Severity: 2/4.
Consequences: administrator access/rights, privileged access/rights.
Provenance: privileged account.
Creation date: 12/09/2017.
Identifiers: 2006872, CVE-2017-1508, VIGILANCE-VUL-23807.
Description of the vulnerability
An attacker can bypass restrictions of IBM Informix Dynamic Server, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
IBM Informix Dynamic Server: denial of service via Large Assertion Fail Files
Synthesis of the vulnerability
An attacker can generate a fatal error via Large Assertion Fail Files of IBM Informix Dynamic Server, in order to trigger a denial of service.
Impacted products: Informix Server.
Severity: 2/4.
Consequences: denial of service on service.
Provenance: intranet client.
Creation date: 28/06/2017.
Identifiers: 2004930, CVE-2017-1310, VIGILANCE-VUL-23093.
Description of the vulnerability
An attacker can generate a fatal error via Large Assertion Fail Files of IBM Informix Dynamic Server, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
IBM Informix Dynamic Server: privilege escalation via Open Admin Tool
Synthesis of the vulnerability
An attacker can bypass restrictions via Open Admin Tool of IBM Informix Dynamic Server, in order to escalate his privileges.
Impacted products: Informix Server.
Severity: 2/4.
Consequences: administrator access/rights.
Provenance: user account.
Creation date: 12/05/2017.
Revision date: 31/05/2017.
Identifiers: 2002897, CVE-2017-1092, VIGILANCE-VUL-22716.
Description of the vulnerability
An attacker can bypass restrictions via Open Admin Tool of IBM Informix Dynamic Server, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
Blowfish, Triple-DES: algorithms too weak, SWEET32
Synthesis of the vulnerability
An attacker can create a TLS/VPN session with a Blowfish/Triple-DES algorithm, and perform a two days attack, in order to decrypt data.
Impacted products: Avaya Ethernet Routing Switch, Blue Coat CAS, ProxySG par Blue Coat, SGOS by Blue Coat, Cisco ASR, Cisco Aironet, Cisco ATA, Cisco AnyConnect Secure Mobility Client, Cisco ACE, ASA, AsyncOS, Cisco Catalyst, Cisco Content SMA, Cisco ESA, IOS by Cisco, IOS XE Cisco, IOS XR Cisco, Cisco IPS, Nexus by Cisco, NX-OS, Cisco Prime Access Registrar, Prime Collaboration Assurance, Cisco Prime DCNM, Prime Infrastructure, Cisco Prime LMS, Cisco Router, Secure ACS, Cisco CUCM, Cisco Manager Attendant Console, Cisco Unified CCX, Cisco IP Phone, Cisco MeetingPlace, Cisco Wireless IP Phone, Cisco WSA, Cisco Wireless Controller, Debian, Avamar, Black Diamond, ExtremeXOS, Summit, BIG-IP Hardware, TMOS, Fedora, FileZilla Server, FortiAnalyzer, FortiAnalyzer Virtual Appliance, FortiGate, FortiGate Virtual Appliance, FortiOS, FreeRADIUS, hMailServer, HPE BSM, LoadRunner, HP Operations, Performance Center, Real User Monitoring, SiteScope, HP Switch, HP-UX, AIX, DB2 UDB, Informix Server, IRAD, Security Directory Server, Tivoli Directory Server, Tivoli Storage Manager, Tivoli System Automation, WebSphere MQ, Junos Space, McAfee Email Gateway, ePO, Data ONTAP, Snap Creator Framework, Nodejs Core, OpenSSL, openSUSE, openSUSE Leap, Oracle Communications, Oracle DB, Oracle Directory Server, Oracle Directory Services Plus, Oracle Fusion Middleware, Oracle GlassFish Server, Oracle Identity Management, Oracle iPlanet Web Server, Oracle OIT, Solaris, Tuxedo, Oracle Virtual Directory, WebLogic, Oracle Web Tier, SSL protocol, Pulse Connect Secure, Pulse Secure Client, Pulse Secure SBR, RHEL, JBoss EAP by Red Hat, SAS Add-in for Microsoft Office, SAS Analytics Pro, Base SAS Software, SAS Enterprise BI Server, SAS Enterprise Guide, SAS Management Console, SAS OLAP Server, SAS SAS/ACCESS, SAS SAS/AF, SAS SAS/CONNECT, SAS SAS/EIS, SAS SAS/ETS, SAS SAS/FSP, SAS SAS/GRAPH, SAS SAS/IML, SAS SAS/OR, SAS SAS/STAT, SAS SAS/Web Report Studio, SIMATIC, Slackware, Splunk Enterprise, stunnel, SUSE Linux Enterprise Desktop, SLES, Synology DS***, Synology RS***, Nessus, Ubuntu, WinSCP.
Severity: 1/4.
Consequences: data reading.
Provenance: internet client.
Number of vulnerabilities in this bulletin: 2.
Creation date: 25/08/2016.
Identifiers: 1610582, 1991866, 1991867, 1991870, 1991871, 1991875, 1991876, 1991878, 1991880, 1991882, 1991884, 1991885, 1991886, 1991887, 1991889, 1991892, 1991894, 1991896, 1991902, 1991903, 1991951, 1991955, 1991959, 1991960, 1991961, 1992681, 1993777, 1994375, 1995099, 1995922, 1998797, 1999054, 1999421, 2000209, 2000212, 2000370, 2000544, 2001608, 2002021, 2002335, 2002336, 2002479, 2002537, 2002870, 2002897, 2002991, 2003145, 2003480, 2003620, 2003673, 2004036, 2008828, 523628, 9010102, bulletinapr2017, c05349499, c05369403, c05369415, c05390849, CERTFR-2017-AVI-012, CERTFR-2019-AVI-049, CERTFR-2019-AVI-311, cisco-sa-20160927-openssl, cpuapr2017, cpujan2018, cpujul2017, cpuoct2017, CVE-2016-2183, CVE-2016-6329, DSA-2018-124, DSA-3673-1, DSA-3673-2, FEDORA-2016-7810e24465, FEDORA-2016-dc2cb4ad6b, FG-IR-16-047, FG-IR-16-048, FG-IR-17-127, FG-IR-17-173, HPESBGN03697, HPESBGN03765, HPESBUX03725, HPSBGN03690, HPSBGN03694, HPSBHF03674, ibm10718843, java_jan2017_advisory, JSA10770, KM03060544, NTAP-20160915-0001, openSUSE-SU-2016:2199-1, openSUSE-SU-2016:2391-1, openSUSE-SU-2016:2407-1, openSUSE-SU-2016:2496-1, openSUSE-SU-2016:2537-1, openSUSE-SU-2017:1638-1, openSUSE-SU-2018:0458-1, RHSA-2017:0336-01, RHSA-2017:0337-01, RHSA-2017:0338-01, RHSA-2017:3113-01, RHSA-2017:3114-01, RHSA-2017:3239-01, RHSA-2017:3240-01, RHSA-2018:2123-01, SA133, SA40312, SB10171, SB10186, SB10197, SB10215, SOL13167034, SP-CAAAPUE, SPL-129207, SSA:2016-266-01, SSA:2016-363-01, SSA-556833, SUSE-SU-2016:2387-1, SUSE-SU-2016:2394-1, SUSE-SU-2016:2458-1, SUSE-SU-2016:2468-1, SUSE-SU-2016:2469-1, SUSE-SU-2016:2470-1, SUSE-SU-2016:2470-2, SUSE-SU-2017:1444-1, SUSE-SU-2017:2838-1, SUSE-SU-2017:3177-1, SWEET32, TNS-2016-16, USN-3087-1, USN-3087-2, USN-3270-1, USN-3339-1, USN-3339-2, USN-3372-1, VIGILANCE-VUL-20473.
Description of the vulnerability
The Blowfish and Triple-DES symetric encryption algorithms use 64 bit blocks.
However, if they are used in CBC mode, a collision occurs after 785 GB transferred, and it is then possible to decrypt blocks with an attack lasting two days.
An attacker can therefore create a TLS/VPN session with a Blowfish/Triple-DES algorithm, and perform a two days attack, in order to decrypt data.
Full Vigil@nce bulletin... (Free trial) |
IBM Informix Dynamic Server: privilege escalation via ACL
Synthesis of the vulnerability
An attacker can alter nsrexecd.exe of IBM Informix Dynamic Server, in order to escalate his privileges.
Impacted products: Informix Server.
Severity: 2/4.
Consequences: administrator access/rights, privileged access/rights.
Provenance: user shell.
Creation date: 11/03/2016.
Identifiers: 1978598, CVE-2016-0226, VIGILANCE-VUL-19158, ZDI-16-195, ZDI-16-208, ZDI-16-209, ZDI-16-210.
Description of the vulnerability
The IBM Informix Dynamic Server product is installed in C:\ISM on Windows.
However, ACLs on this directory are too permissive, so a local attacker can alter the nsrexecd.exe program.
An attacker can therefore alter nsrexecd.exe of IBM Informix Dynamic Server, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
IBM GSKit: information disclosure via MD5 collisions
Synthesis of the vulnerability
An attacker can use a vulnerability in GSKit of IBM, in order to obtain sensitive information.
Impacted products: DB2 UDB, Informix Server, Tivoli Storage Manager, WebSphere MQ.
Severity: 2/4.
Consequences: data reading.
Provenance: internet client.
Creation date: 19/01/2016.
Revision date: 22/01/2016.
Identifiers: 1610582, 1974466, 1974785, 1975839, CVE-2016-0201, VIGILANCE-VUL-18756.
Description of the vulnerability
Several IBM products use the GSKit component.
However, an attacker can trigger a MD5 collision to access to data.
An attacker can therefore use a vulnerability in GSKit of IBM, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
Check Point, Cisco, IBM, F5, FortiOS: information disclosure via POODLE on TLS
Synthesis of the vulnerability
An attacker, located as a Man-in-the-Middle, can decrypt a Terminating TLS session, in order to obtain sensitive information.
Impacted products: GAiA, CheckPoint IP Appliance, IPSO, CheckPoint Power-1 Appliance, SecurePlatform, CheckPoint Security Appliance, CheckPoint Smart-1, CheckPoint VSX-1, Cisco ACE, ASA, BIG-IP Hardware, TMOS, Fedora, FortiGate, FortiGate Virtual Appliance, FortiOS, DB2 UDB, Domino, Informix Server, Tivoli Directory Server, openSUSE, Solaris, Palo Alto Firewall PA***, PAN-OS, Ubuntu.
Severity: 3/4.
Consequences: data reading.
Provenance: internet client.
Number of vulnerabilities in this bulletin: 2.
Creation date: 09/12/2014.
Revision date: 17/12/2014.
Identifiers: 1450666, 1610582, 1647054, 1692906, 1693052, 1693142, bulletinjul2017, CERTFR-2014-AVI-533, CSCus08101, CSCus09311, CVE-2014-8730, CVE-2015-2774, FEDORA-2015-12923, FEDORA-2015-12970, openSUSE-SU-2016:0523-1, sk103683, SOL15882, USN-3571-1, VIGILANCE-VUL-15756.
Description of the vulnerability
The VIGILANCE-VUL-15485 (POODLE) vulnerability originates from an incorrect management of SSLv3 padding.
The F5 BIG-IP product can be configured to "terminate" SSL/TLS sessions. However, even when TLS is used, this BIG-IP feature uses the SSLv3 function to manage the padding. TLS sessions are thus also vulnerable to POODLE.
The same vulnerability also impacts Check Point, Cisco, IBM and Fortinet products.
An attacker, located as a Man-in-the-Middle, can therefore decrypt a Terminating TLS session, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
IBM GSKit: infinite loop of SSL
Synthesis of the vulnerability
An attacker can send malicious SSL/TLS messages to applications using IBM GSKit, in order to trigger a denial of service.
Impacted products: DB2 UDB, Domino, I-Connect, Informix Server, Notes, Security Directory Server, SPSS Modeler, Tivoli Storage Manager, Tivoli Workload Scheduler.
Severity: 3/4.
Consequences: denial of service on service, denial of service on client.
Provenance: internet client.
Creation date: 20/05/2014.
Identifiers: 1610582, 1671732, 1672724, 1673008, 1673018, 1673666, 1673696, 1674047, 1674824, 1674825, 1681114, 7042179, CVE-2014-0963, VIGILANCE-VUL-14775.
Description of the vulnerability
The IBM Global Security Kit (GSKit) suite implements the support of SSL/TLS for several IBM applications.
However, some SSL messages generate an infinite loop in GSKit.
An attacker can therefore send malicious SSL/TLS messages to applications using IBM GSKit, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
IBM GSKit: denial of service via SSL/TLS
Synthesis of the vulnerability
An attacker can send malicious SSL/TLS messages to applications using IBM GSKit, in order to trigger a denial of service.
Impacted products: DB2 UDB, Informix Server, Security Directory Server, SPSS Modeler, Tivoli Directory Server, Tivoli Storage Manager, Tivoli Workload Scheduler, WebSphere MQ.
Severity: 2/4.
Consequences: denial of service on service.
Provenance: internet client.
Creation date: 30/01/2014.
Identifiers: 1610582, 1662902, 1665137, 1668664, 1670524, 1671732, 1673696, 1674047, 1674824, 1674825, CVE-2013-6747, VIGILANCE-VUL-14158.
Description of the vulnerability
The IBM Global Security Kit (GSKit) suite implements the support of SSL/TLS for several IBM applications.
However, a malformed certificate chain triggers an error.
An attacker can therefore send malicious SSL/TLS messages to applications using IBM GSKit, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
IBM GSKit: denial of service via SSLv2
Synthesis of the vulnerability
An attacker can send malicious SSLv2 messages to applications using IBM GSKit, in order to trigger a denial of service.
Impacted products: Informix Server, Tivoli Directory Server.
Severity: 2/4.
Consequences: denial of service on service.
Provenance: internet client.
Creation date: 30/01/2014.
Identifiers: 1660436, 1660440, 1662362, 88939, BID-64249, CVE-2013-6329, VIGILANCE-VUL-14155.
Description of the vulnerability
The IBM Global Security Kit (GSKit) suite implements the support of SSL/TLS for several IBM applications.
However, the SSLv2 session resumption is incorrectly implemented.
An attacker can therefore send malicious SSLv2 messages to applications using IBM GSKit, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Our database contains other pages. You can request a free trial to read them.
Display information about IBM Informix Server:
|