CVSS: 3.6EPSS: 0%CPEs: 1EXPL: 2CVE-2006-5163
https://notcve.org/view.php?id=CVE-2006-5163
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack. IBM Informix Dynamic Server 10.UC3RC1 Trial para Linux y posiblemente otras versiones crean /tmp/installserver.txt con permisos no seguros, lo cual permite a usuarios locales añadir información a ficheros de su elección mediante un ataque de enlace simbólico. • http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0013.html http://secunia.com/advisories/22223 http://securityreason.com/securityalert/1686 http://www.osvdb.org/29349 http://www.securityfocus.com/archive/1/447501/100/0/threaded http://www.securityfocus.com/bid/20300 http://www.vupen.com/english/advisories/2006/3883 https://exchange.xforce.ibmcloud.com/vulnerabilities/29297 https://exchange.xforce.ibmcloud.com/vulnerabilities/29300 •
CVSS: 7.5EPSS: 88%CPEs: 4EXPL: 1CVE-2006-3854
https://notcve.org/view.php?id=CVE-2006-3854
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853. Desbordamiento de búfer en IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, y 10.00.TC5, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección medianet un nombre de usuario largo, lo que provoca un desbordamiento en vsprintf cuando se está mostrando el mensaje de error resultante. NOTA: este problema se debe a una solución incompleta de CVE-2006-3853. • http://securityreason.com/securityalert/1409 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf http://www.securityfocus.com/archive/1/443133/100/0/threaded http://www.securityfocus.com/archive/1/443150/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28381 •
CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0CVE-2006-3860
https://notcve.org/view.php?id=CVE-2006-3860
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions. IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 20.00 anterior a 10.00.xC3 permite a usuarios remotos autenticados ejecutar comandos de su elección mediante el comando SQL (1) "SET DEBUG FILE", y las funciones (2)start_onpload y (3) dbexp. • http://secunia.com/advisories/21301 http://securityreason.com/securityalert/1407 http://www-1.ibm.com/support/docview.wss?uid=swg21242921 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf http://www.osvdb.org/27686 http://www.securityfocus.com/archive/1/443133/100/0/threaded http://www.securityfocus.com/archive/1/443185/100/0/threaded http://www.securityfocus.com/bid/19264 http://www.vupen.com/english/advisories/2006/3077 https://exchange.xforce.ibmclo •
CVSS: 4.0EPSS: 0%CPEs: 4EXPL: 1CVE-2006-3859
https://notcve.org/view.php?id=CVE-2006-3859
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands. IBM UInformix Dynamic Server (IDS) permite a usuarios remotos autenticados crear y sobrescribir archivos de su elección mediante las funciones (1) LOTOFILE y (2) trl_tracefile_set, y los comandos (3) "SET DEGUB FILE". • http://securityreason.com/securityalert/1408 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf http://www.securityfocus.com/archive/1/443133/100/0/threaded http://www.securityfocus.com/archive/1/443216/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28383 •
CVSS: 2.1EPSS: 0%CPEs: 9EXPL: 0CVE-2006-3856
https://notcve.org/view.php?id=CVE-2006-3856
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors. IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 10.00 anterior a 10.00.xC3 permite a usuarios locales provocar una denegación de servicio (caída) a través de vectores no especificados. • http://secunia.com/advisories/21301 http://www-1.ibm.com/support/docview.wss?uid=swg21242921 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf http://www.osvdb.org/27690 http://www.securityfocus.com/archive/1/443133/100/0/threaded http://www.securityfocus.com/archive/1/443210/100/0/threaded http://www.securityfocus.com/bid/19264 http://www.vupen.com/english/advisories/2006/3077 https://exchange.xforce.ibmcloud.com/vulnerabilities/28131 •