Lucene search

[email protected]CVE-2006-3856

HistoryAug 08, 2006 - 10:04 p.m.

CVE-2006-3856

2006-08-0822:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ibm

informix dynamic server

ids

denial of service

crash

vulnerability

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON

IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.

CPENameOperatorVersion
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc3
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc2
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.tc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc1
ibm:informix_dynamic_serveribm informix dynamic servereq10.0.xc1
ibm:informix_dynamic_serveribm informix dynamic servereq10.0
ibm:informix_dynamic_serveribm informix dynamic servereq9.4
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc5

CPE	Name	Operator	Version
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc3
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc2
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.tc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.0.xc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.0
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.4
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc5

References

secunia.com/advisories/21301

www-1.ibm.com/support/docview.wss?uid=swg21242921

www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

www.osvdb.org/27690

www.securityfocus.com/archive/1/443133/100/0/threaded

www.securityfocus.com/archive/1/443210/100/0/threaded

www.securityfocus.com/bid/19264

www.vupen.com/english/advisories/2006/3077

exchange.xforce.ibmcloud.com/vulnerabilities/28131

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON

Related for CVE-2006-3856

securityvulns1 nessus1