1. CVE-Search
  2. CVE-2006-3855
ID CVE-2006-3855
Summary The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR." This vulnerability is addressed in the following product releases: IBM, Informix IDS, 9.40 xC7 IBM, Informix IDS, 10.00 xC4
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*
CVSS
Base: 6.5 (as of 17-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
refmap via4
bid 19264
bugtraq
  • 20060814 Arbitrary Library Loading in Informix
  • 20060814 Informix - Discovery, Attack and Defense
confirm http://www-1.ibm.com/support/docview.wss?uid=swg21242921
misc http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
osvdb 27689
secunia 21301
vupen ADV-2006-3077
xf informix-ccodeudr-privilege-escalation(28129)
Last major update 17-10-2018 - 21:31
Published 08-08-2006 - 22:04
Last modified 17-10-2018 - 21:31
Back to Top