CVE

Id
19962  
CVE No.
CVE-2006-3858  
Status
Candidate  
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184149 19962 CVE-2006-3858 BUGTRAQ:20060814 Informix - Discovery, Attack and Defense  View
184150 19962 CVE-2006-3858 URL:http://www.securityfocus.com/archive/1/archive/1/443133/100/0/threaded  View
184151 19962 CVE-2006-3858 BUGTRAQ:20060814 Multiple Password Exposures Flaws  View
184152 19962 CVE-2006-3858 URL:http://www.securityfocus.com/archive/1/archive/1/443195/100/0/threaded  View
184153 19962 CVE-2006-3858 MISC:http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
184154 19962 CVE-2006-3858 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21242921  View
184155 19962 CVE-2006-3858 BID:19264  View
184156 19962 CVE-2006-3858 URL:http://www.securityfocus.com/bid/19264  View
184157 19962 CVE-2006-3858 VUPEN:ADV-2006-3077  View
184158 19962 CVE-2006-3858 URL:http://www.vupen.com/english/advisories/2006/3077  View
184159 19962 CVE-2006-3858 OSVDB:27691  View
184160 19962 CVE-2006-3858 URL:http://www.osvdb.org/27691  View
184161 19962 CVE-2006-3858 SECUNIA:21301  View
184162 19962 CVE-2006-3858 URL:http://secunia.com/advisories/21301  View
184163 19962 CVE-2006-3858 XF:informix-plaintext-password(28132)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59628 JVNDB-2006-001894 IBM IDS における任意のコマンドを実行される脆弱性 IBM Informix Dynamic Server (IDS) には、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-3860 19962 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001894.html  View