CVSS: 9.8EPSS: 1%CPEs: 5EXPL: 0CVE-2006-3862 – NISR02082006G.txt
https://notcve.org/view.php?id=CVE-2006-3862
08 Aug 2006 — Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable). Desbordamiento de búfer en IBM Informix Dynamic Server (IDS) 9.40.TC5 hasta 9.40.xC7 y 10.00.TC1 hasta 10.00.xC3 permite a atacantes remotos ejecutar código de su elección a través de la variable de entorno (envariable) SQLIDEBUG. Informix Dynamic Server is a database developed by IBM. During a security ... • http://secunia.com/advisories/21301 •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 2CVE-2004-2319
https://notcve.org/view.php?id=CVE-2004-2319
31 Dec 2004 — IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. • http://secunia.com/advisories/10737 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2004-2490
https://notcve.org/view.php?id=CVE-2004-2490
31 Dec 2004 — Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable. • http://marc.info/?l=bugtraq&m=107524391217364&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2004-2489
https://notcve.org/view.php?id=CVE-2004-2489
31 Dec 2004 — Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename. • http://marc.info/?l=bugtraq&m=107524391217364&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 4CVE-2004-2131 – IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-2131
27 Jan 2004 — Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. • https://www.exploit-db.com/exploits/23609 •