Lucene search

MitreCVE-2006-3862

HistoryAug 08, 2006 - 10:04 p.m.

CVE-2006-3862

2006-08-0822:04:00

mitre

web.nvd.nist.gov

cve

buffer overflow

ibm informix dynamic server

ids

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.032

Percentile

91.3%

JSON

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).

Affected configurations

Nvd

Node

ibminformix_dynamic_serverMatch9.40.tc5

ibminformix_dynamic_serverMatch9.40.uc5

ibminformix_dynamic_serverMatch9.40.xc5

ibminformix_dynamic_serverMatch10.0.tc1

ibminformix_dynamic_serverMatch10.0.xc1

VendorProductVersionCPE
ibminformix_dynamic_server9.40.tc5cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
ibminformix_dynamic_server9.40.uc5cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
ibminformix_dynamic_server9.40.xc5cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*
ibminformix_dynamic_server10.0.tc1cpe:2.3:a:ibm:informix_dynamic_server:10.0.tc1:*:*:*:*:*:*:*
ibminformix_dynamic_server10.0.xc1cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	informix_dynamic_server	9.40.tc5	cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:::::::*
ibm	informix_dynamic_server	9.40.uc5	cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:::::::*
ibm	informix_dynamic_server	9.40.xc5	cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:::::::*
ibm	informix_dynamic_server	10.0.tc1	cpe:2.3:a:ibm:informix_dynamic_server:10.0.tc1:::::::*
ibm	informix_dynamic_server	10.0.xc1	cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:::::::*

References

secunia.com/advisories/21301

www-1.ibm.com/support/docview.wss?uid=swg21242921

www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

www.osvdb.org/27694

www.securityfocus.com/archive/1/443133/100/0/threaded

www.securityfocus.com/archive/1/443165/100/0/threaded

www.securityfocus.com/bid/19264

www.vupen.com/english/advisories/2006/3077

exchange.xforce.ibmcloud.com/vulnerabilities/28158

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.032

Percentile

91.3%

JSON

Related for CVE-2006-3862