Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-3854
HistoryAug 17, 2006 - 1:04 a.m.

CVE-2006-3854

2006-08-1701:04:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
18
cve-2006-3854
buffer overflow
ibm informix dynamic server
remote code execution
windows
security vulnerability

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.883 High

EPSS

Percentile

98.7%

JSON

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. NOTE: this issue is due to an incomplete fix for CVE-2006-3853.

Related

securityvulns 2
checkpoint_advisories 1
cve 1
nessus 1
securityvulns
securityvulns
Error logging buffer overflow in Informix
2006-08-14 00:00:00
Informix Long Username Buffer Overflow Vulnerability
2006-08-14 00:00:00
checkpoint_advisories
checkpoint_advisories
IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)
2014-12-28 00:00:00
cve
cve
CVE-2006-3853
2006-08-08 22:04:00
nessus
nessus
Informix Dynamic Server Multiple Remote Vulnerabilities
2006-08-16 00:00:00

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.883 High

EPSS

Percentile

98.7%

JSON
Related for CVE-2006-3854
securityvulns2checkpoint_advisories1cve1nessus1