PT-2006-4711 · Ibm+1 · Ibm Informix Dynamic Server+1

Published 2006-08-08 · Updated 2018-10-17 · CVE-2006-3853

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server (IDS) versions 9.40 before 9.40.TC7 IBM Informix Dynamic Server (IDS) versions 10.00 before 10.00.TC3

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long username. This occurs when IBM Informix Dynamic Server is running on Windows.

Recommendations For IBM Informix Dynamic Server (IDS) versions 9.40 before 9.40.TC7, update to version 9.40.TC7 or later. For IBM Informix Dynamic Server (IDS) versions 10.00 before 10.00.TC3, update to version 10.00.TC3 or later.

Fix

Related Identifiers

CVE-2006-3853

Affected Products

Ibm Informix Dynamic Server

Windows

References · 10

• http://secunia.com/advisories/21301 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21242921 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3853 · Security Note
• http://securityfocus.com/bid/19264 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28122 · Note
• http://osvdb.org/27685 · Note
• http://databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf · Note
• http://securityfocus.com/archive/1/443133/100/0/threaded · Note
• http://securityfocus.com/archive/1/443149/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/3077 · Note