NVD

Id
62525  
Name
CVE-2006-3858  
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-08-08  
Modified Date
2011-03-07  
Seq
2006-3858  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324866 62525 CVE-2006-3858 http://www-1.ibm.com/support/docview.wss?uid=swg21242921  View
324867 62525 CVE-2006-3858 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
324868 62525 CVE-2006-3858 20060814 Informix - Discovery, Attack and Defense  View
324869 62525 CVE-2006-3858 20060814 Multiple Password Exposures Flaws  View
324870 62525 CVE-2006-3858 19264  View
324871 62525 CVE-2006-3858 ADV-2006-3077  View
324872 62525 CVE-2006-3858 informix-plaintext-password(28132)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59626 JVNDB-2006-001892 IBM IDS におけるパスワードを取得される脆弱性 IBM Informix Dynamic Server (IDS) には、共有メモリに平文でパスワードを格納するため、パスワードを取得される脆弱性が存在します。 CVE-2006-3858 19960 CVE-2006-3858 62525 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001892.html 2006-07-31 2012-09-25 View