CVE-2006-5163 — IBM Informix Dynamic Server vulnerability

3 documents3 sources
Severity
3.6LOWNVD
EPSS
0.1%
top 77.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Informix Dynamic Server
Timeline
PublishedOct 5
Latest updateMay 1

Description

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.

CVSS vector

AV:L/AC:L/C:N/I:P/A:PExploitability: 3.9 | Impact: 4.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-chpg-98xq-qh78: IBM Informix Dynamic Server 10↗2022-05-01
▶
CVEList
CVE-2006-5163: IBM Informix Dynamic Server 10↗2006-10-03
▶
CVE-2006-5163 — IBM vulnerability | cvebase