1. CVE-Search
  2. CVE-2006-3856
ID CVE-2006-3856
Summary IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors. This vulnerability is addressed in the following product releases: IBM, Informix IDS, 9.40 xC7 IBM, Informix IDS, 10.00 xC3
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 17-10-2018 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 19264
bugtraq
  • 20060814 Informix - Discovery, Attack and Defense
  • 20060814 Multiple Buffer Overflow Vulnerabilities in Informix
confirm http://www-1.ibm.com/support/docview.wss?uid=swg21242921
misc http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
osvdb 27690
secunia 21301
vupen ADV-2006-3077
xf informix-unspecified-dos(28131)
Last major update 17-10-2018 - 21:31
Published 08-08-2006 - 22:04
Last modified 17-10-2018 - 21:31
Back to Top