NVD

Id
62521  
Name
CVE-2006-3854  
Description
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-16  
Modified Date
2008-09-05  
Seq
2006-3854  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324836 62521 CVE-2006-3854 1409  View
324837 62521 CVE-2006-3854 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
324838 62521 CVE-2006-3854 20060814 Informix - Discovery, Attack and Defense  View
324839 62521 CVE-2006-3854 20060814 Error logging buffer overflow in Informix  View
324840 62521 CVE-2006-3854 informix-long-username-bo(28381)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59622 JVNDB-2006-001888 IBM IDS におけるバッファオーバーフローの脆弱性 IBM Informix Dynamic Server (IDS) には、Windows 上で稼動している際、バッファオーバーフローの脆弱性が存在します。 CVE-2006-3854 19956 CVE-2006-3854 62521 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001888.html 2006-08-16 2012-09-25 View