CVE-2006-3857

Published: Aug 8, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).

Affected (11)

Products: Ibm: Informix Dynamic Database Server

1 product

Informix Dynamic Database Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Database Server	Version 10.00.tc1
Ibm Informix Dynamic Database Server	Version 10.00.tc2
Ibm Informix Dynamic Database Server	Version 9.3
Ibm Informix Dynamic Database Server	Version 9.40.tc1
Ibm Informix Dynamic Database Server	Version 9.40.tc2
Ibm Informix Dynamic Database Server	Version 9.40.tc3
Ibm Informix Dynamic Database Server	Version 9.40.tc4
Ibm Informix Dynamic Database Server	Version 9.40.tc5
Ibm Informix Dynamic Database Server	Version 9.40.uc1
Ibm Informix Dynamic Database Server	Version 9.40.uc2
Ibm Informix Dynamic Database Server	Version 9.40.uc3

References (38)

http://secunia.com/advisories/21301

Source: cve@mitre.org

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg21242921

Source: cve@mitre.org

Patch

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: cve@mitre.org

http://www.osvdb.org/27681

Source: cve@mitre.org

http://www.osvdb.org/27682

Source: cve@mitre.org

http://www.osvdb.org/27683

Source: cve@mitre.org

http://www.osvdb.org/27687

Source: cve@mitre.org

http://www.osvdb.org/27688

Source: cve@mitre.org

http://www.osvdb.org/27693

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443210/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19264

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3077

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28118

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28119

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28120

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28126

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28127

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28157

Source: cve@mitre.org

http://secunia.com/advisories/21301

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg21242921

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27681

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27682

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27683

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27687

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27688

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27693

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/443210/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19264

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/3077

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28118

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28119

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28120

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28126

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28127

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28157

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.