CVSS: 8.8EPSS: 4%CPEs: 11EXPL: 0CVE-2006-3857 – NISR02082006D.txt
https://notcve.org/view.php?id=CVE-2006-3857
08 Aug 2006 — Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179). Múltiples desbordamientos de búfer en I... • http://secunia.com/advisories/21301 •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2006-3856
https://notcve.org/view.php?id=CVE-2006-3856
08 Aug 2006 — IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors. IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 10.00 anterior a 10.00.xC3 permite a usuarios locales provocar una denegación de servicio (caída) a través de vectores no especificados. • http://secunia.com/advisories/21301 •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2006-3858 – NISR02082006E.txt
https://notcve.org/view.php?id=CVE-2006-3858
08 Aug 2006 — IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772). IBM Informix Dynamic Server (IDS) anterior a 9.40.xC8 y 10.00 anterior a 10.00.xC4 almacena contraseñas en texto plano en memoria compartida, lo cual permite a usuarios locales obtener contraseñas leyendo la memoria (defectos de producto 171893, 171894, 173772). Informix Dynami... • http://secunia.com/advisories/21301 •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2005-3642
https://notcve.org/view.php?id=CVE-2005-3642
16 Nov 2005 — IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username. • http://www.ngssoftware.com/papers/database-on-xp.pdf •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 2CVE-2004-2319
https://notcve.org/view.php?id=CVE-2004-2319
31 Dec 2004 — IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. • http://secunia.com/advisories/10737 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2004-2490
https://notcve.org/view.php?id=CVE-2004-2490
31 Dec 2004 — Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable. • http://marc.info/?l=bugtraq&m=107524391217364&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2004-2489
https://notcve.org/view.php?id=CVE-2004-2489
31 Dec 2004 — Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename. • http://marc.info/?l=bugtraq&m=107524391217364&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 4CVE-2004-2131 – IBM Informix Dynamic Server 9.40/Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-2131
27 Jan 2004 — Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. • https://www.exploit-db.com/exploits/23609 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 3CVE-2002-0905 – IBM Informix SE 7.25 sqlexec - Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2002-0905
31 Aug 2002 — Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable. Desbordamiento de búfer en sqlexec en Informix SE-7.25 permite a usuarios locales ganar privilegios de root mediante una variable de entorno INFORMIXDIR larga. • https://www.exploit-db.com/exploits/21496 •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2002-0555
https://notcve.org/view.php?id=CVE-2002-0555
11 Jun 2002 — IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it. • http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html •