CVE-2009-2754

no score yetEPSS 40%

No CVSS score yet. EPSS 40% chance of exploitation in the next 30 days.

Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.

EPSS: 40% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2010-03-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

emc:legato_networker
ibm:informix_dynamic_server

References

http://knowledgebase.emc.com/emcice/login.do?sType=ax1990&sName=1204&id=emc183834
http://secunia.com/advisories/38731
http://www.ibm.com/support/docview.wss?uid=swg1IC55329
http://www.ibm.com/support/docview.wss?uid=swg1IC55330
http://www.securityfocus.com/archive/1/509793/100/0/threaded

Check your stack JSON