CVE-2006-3855

The ifxloadinternal function in IBM Informix Dynamic Server IDS allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."...

CVE-2006-3853

Buffer overflow in IBM Informix Dynamic Server IDS before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username...

CVE-2006-3857

CVE-2006-3857 involves multiple buffer overflow vulnerabilities in IBM Informix Dynamic Server (IDS) prior to 9.40.TC6 and 10.00 prior to 10.00.TC3. The overflows occur in the protocol path via the getname() function (used by _sq_remview, _sq_remproc, _sq_remperms, _sq_distfetch, _sq_dcatalog) an...

CVE-2006-3853

CVE-2006-3853: Buffer overflow in IBM Informix Dynamic Server (IDS) on Windows allows remote code execution via a long username. Affected IDS versions are before 9.40.TC7 and before 10.00.TC3. The issue arises from unsafe handling of long usernames; there is no public remediation detail in the pr...

CVE-2006-3858

CVE-2006-3858 affects IBM Informix Dynamic Server (IDS) prior to 9.40.xC8 and 10.00 prior to 10.00.xC4. The flaw causes passwords to be stored in plaintext in a shared memory region, enabling local users to read memory and obtain passwords. Affected products include IDS versions before the stated...

CVE-2006-3861: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases...

CVE-2006-3856: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of service crash via unspecified vectors...

CVE-2006-3853: Undefined Security Weakness

Buffer overflow in IBM Informix Dynamic Server IDS before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username...

CVE-2006-3858: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...

CVE-2006-3862: Undefined Security Weakness

Buffer overflow in IBM Informix Dynamic Server IDS 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable envariable...

CVE-2006-3857: Undefined Security Weakness

Multiple buffer overflows in IBM Informix Dynamic Server IDS before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via 1 the getname function, as used by a sqremview, b sqremproc, c sqremperms, d sqdistfetch, and e sqdcatalog; and the 2 SET DEBUG...

CVE-2006-3855: Undefined Security Weakness

The ifxloadinternal function in IBM Informix Dynamic Server IDS allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."...

CVE-2006-2547

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...

Design/Logic Flaw

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...

CVE-2006-2547

CVE-2006-2547 affects SAP with Informix, specifically the sapdba command. The vulnerability arises from insecure environment variable handling, enabling local users to run arbitrary commands via unknown vectors. Affected scope is SAP Informix deployments before version 700 and 700 up to patch 100...

CVE-2006-2547

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...

CVE-2006-2547: Undefined Security Weakness

Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling...

[Full-disclosure] CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityPre-AdvisoryLocalPrivilegeEscalationinSAPsapdbaCommand.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: Local Privilege Escalation in SAP sapdba Command Vulnerability Class: Insecure...

SAP sapdba for Informix database administration utility privilege escalation

Improper environment cariables validation allows to run any command with informix rights...

CVE-2005-3642

IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username...