CVE-2004-2131: IBM Informix Dynamic Server

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.

Affected products

• IBM Informix Dynamic Server: version 9.40.uc1 only; version 9.40.uc2 only
• IBM Informix Extended Parallel Server: version 8.40_uc1 only

Published 2004-01-27. Last modified 2026-06-16.