Show filters
22 Total Results
Displaying 11-20 of 22
Sort by:
Attacker Value
Unknown
CVE-2006-5664
Disclosure Date: November 03, 2006 (last updated October 04, 2023)
The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files.
0
Attacker Value
Unknown
CVE-2006-5663
Disclosure Date: November 03, 2006 (last updated October 04, 2023)
IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.
0
Attacker Value
Unknown
CVE-2006-3859
Disclosure Date: August 17, 2006 (last updated October 04, 2023)
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
0
Attacker Value
Unknown
CVE-2006-3854
Disclosure Date: August 17, 2006 (last updated October 04, 2023)
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853.
0
Attacker Value
Unknown
CVE-2006-3860
Disclosure Date: August 17, 2006 (last updated October 04, 2023)
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.
0
Attacker Value
Unknown
CVE-2006-3861
Disclosure Date: August 08, 2006 (last updated October 04, 2023)
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
0
Attacker Value
Unknown
CVE-2006-3856
Disclosure Date: August 08, 2006 (last updated October 04, 2023)
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-3855
Disclosure Date: August 08, 2006 (last updated October 04, 2023)
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
0
Attacker Value
Unknown
CVE-2006-3853
Disclosure Date: August 08, 2006 (last updated October 04, 2023)
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
0
Attacker Value
Unknown
CVE-2006-3857
Disclosure Date: August 08, 2006 (last updated October 04, 2023)
Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).
0
