CVE

Id
19963  
CVE No.
CVE-2006-3859  
Status
Candidate  
Description
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184164 19963 CVE-2006-3859 BUGTRAQ:20060814 Informix - Discovery, Attack and Defense  View
184165 19963 CVE-2006-3859 URL:http://www.securityfocus.com/archive/1/archive/1/443133/100/0/threaded  View
184166 19963 CVE-2006-3859 BUGTRAQ:20060814 Multiple Arbitrary File Access (Write/Read) Vulnerabilities  View
184167 19963 CVE-2006-3859 URL:http://www.securityfocus.com/archive/1/archive/1/443216/100/0/threaded  View
184168 19963 CVE-2006-3859 MISC:http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
184169 19963 CVE-2006-3859 SREASON:1408  View
184170 19963 CVE-2006-3859 URL:http://securityreason.com/securityalert/1408  View
184171 19963 CVE-2006-3859 XF:informix-lotofile-file-create(28383)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59629 JVNDB-2006-001895 IBM IDS における任意のデータベースを作成される脆弱性 IBM Informix Dynamic Server (IDS) は、データベース作成パーミッションを使用しないため、任意のデータベースを作成される脆弱性が存在します。 CVE-2006-3861 19963 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001895.html  View