CVEvulnerability
CVE-2006-3859
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Description
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
Affected configurations
• ibm informix dynamic database server 9.40.tc7
• ibm informix dynamic database server 9.40.tc8
• ibm informix dynamic database server 10.00.tc4
• ibm informix dynamic database server 10.00.tc5
References
- http://securityreason.com/securityalert/1408 securityreason.com
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf Exploit
- http://www.securityfocus.com/archive/1/443133/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/443216/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28383 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/1408 securityreason.com
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf Exploit
- http://www.securityfocus.com/archive/1/443133/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/443216/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28383 exchange.xforce.ibmcloud.com