CVE-2006-3860

Published: Aug 17, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.

Affected (11)

Products: Ibm: Informix Dynamic Database Server

1 product

Informix Dynamic Database Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Informix Dynamic Database Server	Version 10.0
Ibm Informix Dynamic Database Server	Version 10.0_xc3
Ibm Informix Dynamic Database Server	Version 7.31_.xd8
Ibm Informix Dynamic Database Server	Version 7.3
Ibm Informix Dynamic Database Server	Version 9.40.tc5
Ibm Informix Dynamic Database Server	Version 9.40.uc1
Ibm Informix Dynamic Database Server	Version 9.40.uc2
Ibm Informix Dynamic Database Server	Version 9.40.uc3
Ibm Informix Dynamic Database Server	Version 9.40.uc5
Ibm Informix Dynamic Database Server	Version 9.40.xc7
Ibm Informix Dynamic Database Server	Version 9.4

References (22)

http://secunia.com/advisories/21301

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1407

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg21242921

Source: cve@mitre.org

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: cve@mitre.org

http://www.osvdb.org/27686

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/443185/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19264

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3077

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28121

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28124

Source: cve@mitre.org

http://secunia.com/advisories/21301

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1407

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg21242921

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27686

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/443185/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19264

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3077

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28121

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28124

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.