CVEvulnerability

CVE-2006-3860

7.5 HIGH Published 2006-08-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.

Affected configurations

• ibm informix dynamic database server 7.3 • ibm informix dynamic database server 7.31 .xd8 • ibm informix dynamic database server 9.4 • ibm informix dynamic database server 9.40.tc5 • ibm informix dynamic database server 9.40.uc1 • ibm informix dynamic database server 9.40.uc2 • ibm informix dynamic database server 9.40.uc3 • ibm informix dynamic database server 9.40.uc5 • ibm informix dynamic database server 9.40.xc7 • ibm informix dynamic database server 10.0 • ibm informix dynamic database server 10.0 xc3

References