PT-2006-4719 · Ibm · Ibm Informix Dynamic Server

Published 2006-08-08 · Updated 2018-10-17 · CVE-2006-3861

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server (IDS) versions 9.40.xC6 and earlier, 10.00.xC2 and earlier

Description The issue allows remote authenticated users to create arbitrary databases due to the lack of database creation permissions.

Recommendations For versions 9.40.xC6 and earlier, update to version 9.40.xC7 or later. For versions 10.00.xC2 and earlier, update to version 10.00.xC3 or later.

Fix

Related Identifiers

CVE-2006-3861

Affected Products

Ibm Informix Dynamic Server

References · 10

• http://secunia.com/advisories/21301 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21242921 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3861 · Security Note
• http://securityfocus.com/bid/19264 · Patch
• http://databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf · Note
• http://securityfocus.com/archive/1/443133/100/0/threaded · Note
• http://securityfocus.com/archive/1/443192/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/3077 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28148 · Note
• http://osvdb.org/27692 · Note