CVE-2006-3859

Published: Aug 17, 2006Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.

Affected (4)

Products: Ibm: Informix Dynamic Database Server

1 product

Informix Dynamic Database Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Database Server	Version 10.00.tc4
Ibm Informix Dynamic Database Server	Version 10.00.tc5
Ibm Informix Dynamic Database Server	Version 9.40.tc7
Ibm Informix Dynamic Database Server	Version 9.40.tc8

References (10)

http://securityreason.com/securityalert/1408

Source: cve@mitre.org

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443216/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28383

Source: cve@mitre.org

http://securityreason.com/securityalert/1408

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/443216/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28383

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.