CVE-2010-4070: Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 i...

Security readout for executives and security teams

This is a legacy IBM Informix/ISM Portmapper flaw. A remote attacker could crash the service or potentially run code by sending a malformed size value. The business risk is highest where old Informix Dynamic Server installations still expose the ISM Portmapper service to untrusted networks. Exposure is likely limited to organizations still running legacy IBM Informix Dynamic Server 7.x, 9.x, 10.00, or 11.10 with the ISM Portmapper service present, especially if reachable remotely. Prioritize remediation where Informix supports business-critical data or where the portmapper service is remotely reachable. Legacy systems may be overlooked, so discovery is as important as patching. Mitigation focus: Upgrade ISM to 2.20.TC1.117 or later where applicable.; Move affected IDS branches to versions at or beyond the listed fixed releases.; Restrict remote access to the ISM Portmapper service from untrusted networks..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.