PT-2006-4719 · Ibm · Ibm Informix Dynamic Server

Publicado 2006-08-08 · Atualizado 2018-10-17 · CVE-2006-3861

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server (IDS) versions 9.40.xC6 and earlier, 10.00.xC2 and earlier

Description The issue allows remote authenticated users to create arbitrary databases due to the lack of database creation permissions.

Recommendations For versions 9.40.xC6 and earlier, update to version 9.40.xC7 or later. For versions 10.00.xC2 and earlier, update to version 10.00.xC3 or later.

Correção

Identificadores relacionados

CVE-2006-3861

Produtos afetados

Ibm Informix Dynamic Server

Referências · 10

• http://secunia.com/advisories/21301 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg21242921 · Correção
• http://databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf · Nota
• http://securityfocus.com/archive/1/443133/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3861 · Nota de Segurança
• http://securityfocus.com/archive/1/443192/100/0/threaded · Nota
• http://securityfocus.com/bid/19264 · Correção
• http://vupen.com/english/advisories/2006/3077 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28148 · Nota
• http://osvdb.org/27692 · Nota