IBM.Informix.Open.Admin.Tool.Code.Execution

Description

This indicates an attack attempt to exploit a Code Injection vulnerability in IBM Informix Open Admin Tool.
The vulnerability is due to an error in the application when handling a crafted HTTP POST request. It may allow remote attackers to execute arbitrary code on vulnerable systems, via a crafted HTTP POST request.

Affected Products

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the latest update from the vendor
http://www-01.ibm.com/support/docview.wss?uid=swg22002897

References