Ibm Informix Dynamic Server vulnerabilities

50 known vulnerabilities affecting ibm/informix_dynamic_server.

Total CVEs

50

CISA KEV

0

Public exploits

3

Exploited in wild

0

Severity breakdown

CRITICAL9HIGH14MEDIUM23LOW4

Vulnerabilities

Page 3 of 3

CVE-2006-3862HIGHCVSS 7.5v9.40.tc5v9.40.uc5+3 more2006-08-08

CVE-2006-3862 [HIGH] CVE-2006-3862: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).

CVE-2006-3853MEDIUMCVSS 5.1v9.4v9.40.tc5+7 more2006-08-08

CVE-2006-3853 [MEDIUM] CVE-2006-3853: Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, whe Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.

CVE-2006-3855MEDIUMCVSS 6.5v9.4v9.40.tc5+6 more2006-08-08

CVE-2006-3855 [MEDIUM] CVE-2006-3855: The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated user The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."

CVE-2006-3861MEDIUMCVSS 4.0v7.31v9.4+8 more2006-08-08

CVE-2006-3861 [MEDIUM] CVE-2006-3861: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database c IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.

CVE-2006-3856LOWCVSS 2.1v9.4v9.40.tc5+7 more2006-08-08

CVE-2006-3856 [LOW] CVE-2006-3856: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to c IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.

CVE-2006-3858LOWCVSS 2.1v9.4v9.40.tc5+9 more2006-08-08

CVE-2006-3858 [LOW] CVE-2006-3858: IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in pla IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).

CVE-2004-2490MEDIUMCVSS 4.6v9.40.uc1v9.40.uc22004-12-31

CVE-2004-2490 [MEDIUM] CVE-2004-2490: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to exe Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.

CVE-2004-2489MEDIUMCVSS 4.6v9.40.uc1v9.40.uc22004-12-31

CVE-2004-2489 [MEDIUM] CVE-2004-2489: Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.

CVE-2004-2319LOWCVSS 3.6v9.40.uc1v9.40.uc22004-12-31

CVE-2004-2319 [LOW] CVE-2004-2319: IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite file IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.

CVE-2004-2131HIGHCVSS 7.2PoCv9.40.uc1v9.40.uc22004-01-27

CVE-2004-2131 [HIGH] CVE-2004-2131: Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier all Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.

← Previous3 / 3