CVSS: 9.8EPSS: 7%CPEs: 4EXPL: 1CVE-2006-3854 – NISR02082006B.txt
https://notcve.org/view.php?id=CVE-2006-3854
17 Aug 2006 — Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853. Desbordamiento de búfer en IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, y 10.00.TC5, cuando se ejecuta en Windows, permite a atacantes remotos ejecu... • http://securityreason.com/securityalert/1409 •
CVSS: 8.8EPSS: 2%CPEs: 11EXPL: 0CVE-2006-3860 – NISR02082006F.txt
https://notcve.org/view.php?id=CVE-2006-3860
17 Aug 2006 — IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions. IBM Informix Dynamic Server (IDS) anterior a 9.40.xC7 y 20.00 anterior a 10.00.xC3 permite a usuarios remotos autenticados ejecutar comandos de su elección mediante el comando SQL (1) "SET DEBUG FILE", y las funciones (2)start_onpload y (3) dbexp. Informix Dynamic Server... • http://secunia.com/advisories/21301 •
CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 1CVE-2006-3859 – NISR02082006I.txt
https://notcve.org/view.php?id=CVE-2006-3859
17 Aug 2006 — IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands. IBM UInformix Dynamic Server (IDS) permite a usuarios remotos autenticados crear y sobrescribir archivos de su elección mediante las funciones (1) LOTOFILE y (2) trl_tracefile_set, y los comandos (3) "SET DEGUB FILE". Informix Dynamic Server is a database developed by IBM. During a security assessment of I... • http://securityreason.com/securityalert/1408 •
CVSS: 8.8EPSS: 4%CPEs: 11EXPL: 0CVE-2006-3857 – NISR02082006D.txt
https://notcve.org/view.php?id=CVE-2006-3857
08 Aug 2006 — Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179). Múltiples desbordamientos de búfer en I... • http://secunia.com/advisories/21301 •