Ibm Informix Dynamic Server vulnerabilities
50 known vulnerabilities affecting ibm/informix_dynamic_server.
Total CVEs
50
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
CRITICAL9HIGH14MEDIUM23LOW4
Vulnerabilities
Page 3 of 3
CVE-2006-3861P4MEDIUMCVSS 4.0v7.31v9.4+8 more2006-08-08
CVE-2006-3861 [MEDIUM] CVE-2006-3861: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database c
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
nvd
CVE-2004-2489P4MEDIUMCVSS 4.6v9.40.uc1v9.40.uc22004-12-31
CVE-2004-2489 [MEDIUM] CVE-2004-2489: Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users
Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.
nvd
CVE-2004-2490P4MEDIUMCVSS 4.6v9.40.uc1v9.40.uc22004-12-31
CVE-2004-2490 [MEDIUM] CVE-2004-2490: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to exe
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.
nvd
CVE-2006-5663P4MEDIUMCVSS 4.6v10.002006-11-03
CVE-2006-5663 [MEDIUM] CVE-2006-5663: IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informi
IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.
nvd
CVE-2006-5664P4MEDIUMCVSS 4.6v10.002006-11-03
CVE-2006-5664 [MEDIUM] CVE-2006-5664: The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development K
The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise security" via a symlink attack on temporary files.
nvd
CVE-2004-2319P4LOWCVSS 3.6v9.40.uc1v9.40.uc22004-12-31
CVE-2004-2319 [LOW] CVE-2004-2319: IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite file
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.
nvd
CVE-2006-5163P4LOWCVSS 3.6v10.uc_rc12006-10-05
CVE-2006-5163 [LOW] CVE-2006-5163: IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/insta
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
nvd
CVE-2007-5957P4MEDIUMCVSS 4.9v10.00.tc3tlv11.10.tb4tl2007-11-14
CVE-2007-5957 [MEDIUM] CVE-2007-5957: Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Window
Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service (application crash) via unspecified SQ_ONASSIST requests.
nvd
CVE-2006-3858P4LOWCVSS 2.1v9.4v9.40.tc5+9 more2006-08-08
CVE-2006-3858 [LOW] CVE-2006-3858: IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in pla
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
nvd
CVE-2006-3856P4LOWCVSS 2.1v9.4v9.40.tc5+7 more2006-08-08
CVE-2006-3856 [LOW] CVE-2006-3856: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to c
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.
nvd
← Previous3 / 3