cbcvebase.

Ibm Informix Dynamic Database Server vulnerabilities

5 known vulnerabilities affecting ibm/informix_dynamic_database_server.

Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2006-3860P3HIGHCVSS 7.5v7.3v7.31_.xd8+9 more2006-08-17
CVE-2006-3860 [HIGH] CVE-2006-3860: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote au IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.
nvd
CVE-2006-3854P3HIGHCVSS 7.5v9.40.tc7v9.40.tc8+2 more2006-08-17
CVE-2006-3854 [HIGH] CVE-2006-3854: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, w Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853.
nvd
CVE-2005-3642P4HIGHCVSS 7.5v9.3v9.40.uc1+2 more2005-11-16
CVE-2005-3642 [HIGH] CVE-2005-3642: IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.
nvd
CVE-2006-3857P4MEDIUMCVSS 6.5v9.3v9.40.tc1+9 more2006-08-08
CVE-2006-3857 [MEDIUM] CVE-2006-3857: Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.0 Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCL
nvd
CVE-2006-3859P4MEDIUMCVSS 4.0v9.40.tc7v9.40.tc8+2 more2006-08-17
CVE-2006-3859 [MEDIUM] CVE-2006-3859: IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrar IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
nvd
Ibm Informix Dynamic Database Server vulnerabilities | cvebase