CVE-2005-3642

Vulnerability summary (CVE-2005-3642) : IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled is affected. The issue allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username. This yields partial impacts...

CVE-2006-3859

CVE-2006-3859 affects IBM Informix Dynamic Server (IDS). The vulnerability allows remote authenticated users to create and overwrite arbitrary files via the LOTOFILE and trl_tracefile_set functions, and via the SET DEBUG FILE command. The underlying issue is that these APIs/commands can be abused...

CVE-2006-3857

CVE-2006-3857 involves multiple buffer overflow vulnerabilities in IBM Informix Dynamic Server (IDS) prior to 9.40.TC6 and 10.00 prior to 10.00.TC3. The overflows occur in the protocol path via the getname() function (used by _sq_remview, _sq_remproc, _sq_remperms, _sq_distfetch, _sq_dcatalog) an...

CVE-2006-3860

CVE-2006-3860 affects IBM Informix Dynamic Server (IDS) versions prior to 9.40.xC7 and 10.00 prior to 10.00.xC3. The vulnerability allows remote authenticated users to execute arbitrary operating system commands through three vectors: (1) the SQL statement SET DEBUG FILE, and the (2) start_onploa...

CVE-2006-3854

CVE-2006-3854 affects IBM Informix Dynamic Server (IDS) on Windows: IDS 9.40.TC7/TC8 and 10.00.TC4/TC5 are vulnerable to a buffer overflow caused by a long username that overflows a vsprintf-based error message, enabling remote arbitrary code execution. The issue is noted as stemming from an inco...