PT-2006-6370 · Ibm · Ibm Informix Dynamic Server+2

Publicado 2006-11-03 · Atualizado 2011-03-08 · CVE-2006-5663

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IBM Informix Dynamic Server version 10.00 Informix Client Software Development Kit (CSDK) version 2.90 Informix I-Connect version 2.90

Description: The issue allows local users to gain privileges by modifying installation scripts due to insecure permissions.

Recommendations: For IBM Informix Dynamic Server version 10.00, update the installation script permissions to prevent local users from modifying them. For Informix Client Software Development Kit (CSDK) version 2.90, adjust the permissions of the installation scripts to restrict access. For Informix I-Connect version 2.90, change the permissions of the installation scripts to secure them against modification by local users.

Correção

Identificadores relacionados

CVE-2006-5663

Produtos afetados

Ibm Informix Dynamic Server

Informix Client Software Development Kit

Informix I-Connect

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-5663 · Nota de Segurança
• http://secunia.com/advisories/22609 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4280 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg21247438 · Correção
• http://securitytracker.com/id?1017156 · Nota