CVE

Id
21267  
CVE No.
CVE-2006-5163  
Status
Candidate  
Description
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.  
Phase
Assigned (20061003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202234 21267 CVE-2006-5163 BUGTRAQ:20061001 IBM Informix Dynamic Server V10.0 File Clobbering during Install  View
202235 21267 CVE-2006-5163 URL:http://www.securityfocus.com/archive/1/archive/1/447501/100/0/threaded  View
202236 21267 CVE-2006-5163 FULLDISC:20061001 IBM Informix Dynamic Server V10.0 File Clobbering during Install  View
202237 21267 CVE-2006-5163 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0013.html  View
202238 21267 CVE-2006-5163 BID:20300  View
202239 21267 CVE-2006-5163 URL:http://www.securityfocus.com/bid/20300  View
202240 21267 CVE-2006-5163 VUPEN:ADV-2006-3883  View
202241 21267 CVE-2006-5163 URL:http://www.vupen.com/english/advisories/2006/3883  View
202242 21267 CVE-2006-5163 OSVDB:29349  View
202243 21267 CVE-2006-5163 URL:http://www.osvdb.org/29349  View
202244 21267 CVE-2006-5163 SECUNIA:22223  View
202245 21267 CVE-2006-5163 URL:http://secunia.com/advisories/22223  View
202246 21267 CVE-2006-5163 SREASON:1686  View
202247 21267 CVE-2006-5163 URL:http://securityreason.com/securityalert/1686  View
202248 21267 CVE-2006-5163 XF:informix-install-script-weak-permissions(29300)  View
202249 21267 CVE-2006-5163 URL:http://xforce.iss.net/xforce/xfdb/29300  View
202250 21267 CVE-2006-5163 XF:informix-installserver-symlink(29297)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60998 JVNDB-2006-003264 Skrypty PPA Gallery の inc/functions.inc.php における PHP リモートファイルインクルージョンの脆弱性 Skrypty PPA Gallery の inc/functions.inc.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5165 21267 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003264.html  View