Lucene search

[email protected]CVE-2006-3858

HistoryAug 08, 2006 - 10:04 p.m.

CVE-2006-3858

2006-08-0822:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ibm

informix dynamic server

ids

plaintext

password

storage

security vulnerability

nvd

cve-2006-3858

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).

CPENameOperatorVersion
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc3
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc2
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc7
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.tc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.xc5
ibm:informix_dynamic_serveribm informix dynamic servereq9.40.uc1
ibm:informix_dynamic_serveribm informix dynamic servereq10.0.xc1
ibm:informix_dynamic_serveribm informix dynamic servereq10.0.xc3
ibm:informix_dynamic_serveribm informix dynamic servereq10.0
ibm:informix_dynamic_serveribm informix dynamic servereq9.4

CPE	Name	Operator	Version
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc3
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc2
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc7
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.tc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.xc5
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.40.uc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.0.xc1
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.0.xc3
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.0
ibm:informix_dynamic_server	ibm informix dynamic server	eq	9.4

Rows per page:

1-10 of 111

References

secunia.com/advisories/21301

www-1.ibm.com/support/docview.wss?uid=swg21242921

www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

www.osvdb.org/27691

www.securityfocus.com/archive/1/443133/100/0/threaded

www.securityfocus.com/archive/1/443195/100/0/threaded

www.securityfocus.com/bid/19264

www.vupen.com/english/advisories/2006/3077

exchange.xforce.ibmcloud.com/vulnerabilities/28132

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

Related for CVE-2006-3858

securityvulns1 nessus1