CVE-2004-2131

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.

Published: Jan 27, 2004
Updated: Nov 9, 2025
CVE: CVE-2004-2131
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ibm / informix_dynamic_server	9.40.uc2	9.40.uc2.x
ibm / informix_extended_parallel_server	8.40_uc1	8.40_uc1.x
ibm / informix_dynamic_server	9.40.uc1	9.40.uc1.x

http://marc.info/?l=bugtraq&m=107539878804074&w=2
http://secunia.com/advisories/10737/
http://www-1.ibm.com/support/docview.wss?uid=swg21153336
http://www.osvdb.org/3759
http://www.securityfocus.com/bid/9512
https://exchange.xforce.ibmcloud.com/vulnerabilities/14970

Vulnerability Database

CVE-2004-2131

Deep Security Visibility Without the Complexity