NVD

Id
62527  
Name
CVE-2006-3860  
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-16  
Modified Date
2011-03-07  
Seq
2006-3860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324878 62527 CVE-2006-3860 1407  View
324879 62527 CVE-2006-3860 http://www-1.ibm.com/support/docview.wss?uid=swg21242921  View
324880 62527 CVE-2006-3860 http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf  View
324881 62527 CVE-2006-3860 20060814 Informix - Discovery, Attack and Defense  View
324882 62527 CVE-2006-3860 20060814 Multiple Arbitrary Command Execution Vulnerabilities  View
324883 62527 CVE-2006-3860 19264  View
324884 62527 CVE-2006-3860 ADV-2006-3077  View
324885 62527 CVE-2006-3860 informix-sysmaster-command-execution(28121)  View
324886 62527 CVE-2006-3860 informix-setdebug-command-execution(28124)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59628 JVNDB-2006-001894 IBM IDS における任意のコマンドを実行される脆弱性 IBM Informix Dynamic Server (IDS) には、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-3860 19962 CVE-2006-3860 62527 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001894.html 2006-07-31 2012-09-25 View