Lucene search

[email protected]CVE-2006-5663

HistoryNov 03, 2006 - 1:07 a.m.

CVE-2006-5663

2006-11-0301:07:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ibm

informix

dynamic server

csdk

i-connect

security

vulnerability

privilege escalation

7.2 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.

CPENameOperatorVersion
ibm:informix_i-connectibm informix i-connecteq2.90
ibm:informix_dynamic_serveribm informix dynamic servereq10.00
ibm:informix_client_sdkibm informix client sdkeq2.90

CPE	Name	Operator	Version
ibm:informix_i-connect	ibm informix i-connect	eq	2.90
ibm:informix_dynamic_server	ibm informix dynamic server	eq	10.00
ibm:informix_client_sdk	ibm informix client sdk	eq	2.90

References

secunia.com/advisories/22609

securitytracker.com/id?1017156

www-1.ibm.com/support/docview.wss?uid=swg21247438

www.vupen.com/english/advisories/2006/4280

7.2 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON