CVE

Id
19964  
CVE No.
CVE-2006-3860  
Status
Candidate  
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184172 19964 CVE-2006-3860 BUGTRAQ:20060814 Informix - Discovery, Attack and Defense  View
184173 19964 CVE-2006-3860 URL:http://www.securityfocus.com/archive/1/archive/1/443133/100/0/threaded  View
184174 19964 CVE-2006-3860 BUGTRAQ:20060814 Multiple Arbitrary Command Execution Vulnerabilities  View
184175 19964 CVE-2006-3860 URL:http://www.securityfocus.com/archive/1/archive/1/443185/100/0/threaded  View
184176 19964 CVE-2006-3860 MISC:http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
184177 19964 CVE-2006-3860 CONFIRM:http://www-1.ibm.com/support/docview.wss?uid=swg21242921  View
184178 19964 CVE-2006-3860 BID:19264  View
184179 19964 CVE-2006-3860 URL:http://www.securityfocus.com/bid/19264  View
184180 19964 CVE-2006-3860 VUPEN:ADV-2006-3077  View
184181 19964 CVE-2006-3860 URL:http://www.vupen.com/english/advisories/2006/3077  View
184182 19964 CVE-2006-3860 OSVDB:27686  View
184183 19964 CVE-2006-3860 URL:http://www.osvdb.org/27686  View
184184 19964 CVE-2006-3860 SECUNIA:21301  View
184185 19964 CVE-2006-3860 URL:http://secunia.com/advisories/21301  View
184186 19964 CVE-2006-3860 SREASON:1407  View
184187 19964 CVE-2006-3860 URL:http://securityreason.com/securityalert/1407  View
184188 19964 CVE-2006-3860 XF:informix-setdebug-command-execution(28124)  View
184189 19964 CVE-2006-3860 URL:http://xforce.iss.net/xforce/xfdb/28124  View
184190 19964 CVE-2006-3860 XF:informix-sysmaster-command-execution(28121)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59630 JVNDB-2006-001896 IBM IDS におけるバッファオーバーフローの脆弱性 IBM Informix Dynamic Server (IDS) には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-3862 19964 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001896.html  View