CVE-2006-3855

Опубликовано: 08 авг. 2006

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."

Ссылки

http://secunia.com/advisories/21301
http://www-1.ibm.com/support/docview.wss?uid=swg21242921
Not Applicable
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
Broken Link
http://www.osvdb.org/27689
Broken Link
http://www.securityfocus.com/archive/1/443133/100/0/threaded
http://www.securityfocus.com/archive/1/443184/100/0/threaded
http://www.securityfocus.com/bid/19264
Patch
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2006/3077
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/28129
http://secunia.com/advisories/21301
http://www-1.ibm.com/support/docview.wss?uid=swg21242921
Not Applicable
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
Broken Link
http://www.osvdb.org/27689
Broken Link
http://www.securityfocus.com/archive/1/443133/100/0/threaded
http://www.securityfocus.com/archive/1/443184/100/0/threaded
http://www.securityfocus.com/bid/19264
Patch
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2006/3077
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/28129

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01298

Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-9cg4-76c7-grpg

github

почти 4 года назад