| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3861 | 4.0 |
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases. This vulnerability is addressed in the following product r
|
17-10-2018 - 21:32 | 08-08-2006 - 22:04 | |
| CVE-2006-3860 | 7.5 |
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.
|
17-10-2018 - 21:32 | 17-08-2006 - 01:04 | |
| CVE-2006-3859 | 4.0 |
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
|
17-10-2018 - 21:32 | 17-08-2006 - 01:04 | |
| CVE-2006-3862 | 7.5 |
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable). This vulnerability is addressed in the foll
|
17-10-2018 - 21:32 | 08-08-2006 - 22:04 | |
| CVE-2006-3858 | 2.1 |
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772). This vulnerabili
|
17-10-2018 - 21:32 | 08-08-2006 - 22:04 | |
| CVE-2006-3854 | 7.5 |
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in
|
17-10-2018 - 21:31 | 17-08-2006 - 01:04 | |
| CVE-2006-3857 | 6.5 |
Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_re
|
17-10-2018 - 21:31 | 08-08-2006 - 22:04 | |
| CVE-2006-3856 | 2.1 |
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors. This vulnerability is addressed in the following product releases:
IBM, Informix IDS, 9.40
|
17-10-2018 - 21:31 | 08-08-2006 - 22:04 | |
| CVE-2006-3855 | 6.5 |
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR." This vulnerability is addressed in the following produ
|
17-10-2018 - 21:31 | 08-08-2006 - 22:04 | |
| CVE-2006-3853 | 5.1 |
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username. This vulnerability is only present in a Windows environme
|
17-10-2018 - 21:31 | 08-08-2006 - 22:04 |