PT-2006-4711 · Ibm+1 · Ibm Informix Dynamic Server+1

Publicado 2006-08-08 · Atualizado 2018-10-17 · CVE-2006-3853

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server (IDS) versions 9.40 before 9.40.TC7 IBM Informix Dynamic Server (IDS) versions 10.00 before 10.00.TC3

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long username. This occurs when IBM Informix Dynamic Server is running on Windows.

Recommendations For IBM Informix Dynamic Server (IDS) versions 9.40 before 9.40.TC7, update to version 9.40.TC7 or later. For IBM Informix Dynamic Server (IDS) versions 10.00 before 10.00.TC3, update to version 10.00.TC3 or later.

Correção

Identificadores relacionados

CVE-2006-3853

Produtos afetados

Ibm Informix Dynamic Server

Windows

Referências · 10

• http://secunia.com/advisories/21301 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21242921 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28122 · Nota
• http://osvdb.org/27685 · Nota
• http://databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf · Nota
• http://securityfocus.com/archive/1/443133/100/0/threaded · Nota
• http://securityfocus.com/archive/1/443149/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3853 · Nota de Segurança
• http://vupen.com/english/advisories/2006/3077 · Nota
• http://securityfocus.com/bid/19264 · Correção