2.1

CVE-2006-3858

IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Informix Dynamic Server Version9.4
Ibm ≫ Informix Dynamic Server Version9.40.tc5
Ibm ≫ Informix Dynamic Server Version9.40.uc1
Ibm ≫ Informix Dynamic Server Version9.40.uc2
Ibm ≫ Informix Dynamic Server Version9.40.uc3
Ibm ≫ Informix Dynamic Server Version9.40.uc5
Ibm ≫ Informix Dynamic Server Version9.40.xc5
Ibm ≫ Informix Dynamic Server Version9.40.xc7
Ibm ≫ Informix Dynamic Server Version10.0
Ibm ≫ Informix Dynamic Server Version10.0.xc1
Ibm ≫ Informix Dynamic Server Version10.0.xc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.61% 0.448
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21301
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21242921
Patch
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
http://www.securityfocus.com/archive/1/443133/100/0/threaded
http://www.securityfocus.com/bid/19264
Patch
http://www.vupen.com/english/advisories/2006/3077
http://www.osvdb.org/27691
http://www.securityfocus.com/archive/1/443195/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/28132