PT-2006-6370 · Ibm · Ibm Informix Dynamic Server+2

Published 2006-11-03 · Updated 2011-03-08 · CVE-2006-5663

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IBM Informix Dynamic Server version 10.00 Informix Client Software Development Kit (CSDK) version 2.90 Informix I-Connect version 2.90

Description: The issue allows local users to gain privileges by modifying installation scripts due to insecure permissions.

Recommendations: For IBM Informix Dynamic Server version 10.00, update the installation script permissions to prevent local users from modifying them. For Informix Client Software Development Kit (CSDK) version 2.90, adjust the permissions of the installation scripts to restrict access. For Informix I-Connect version 2.90, change the permissions of the installation scripts to secure them against modification by local users.

Fix

Related Identifiers

CVE-2006-5663

Affected Products

Ibm Informix Dynamic Server

Informix Client Software Development Kit

Informix I-Connect

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-5663 · Security Note
• http://secunia.com/advisories/22609 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg21247438 · Patch
• http://vupen.com/english/advisories/2006/4280 · Note
• http://securitytracker.com/id?1017156 · Note