4

CVE-2006-3859

Exploit
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Informix Dynamic Database Server Version 9.40.tc7
Ibm ≫ Informix Dynamic Database Server Version 9.40.tc8
Ibm ≫ Informix Dynamic Database Server Version 10.00.tc4
Ibm ≫ Informix Dynamic Database Server Version 10.00.tc5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.11% 0.623
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
Exploit
http://www.securityfocus.com/archive/1/443133/100/0/threaded
http://securityreason.com/securityalert/1408
http://www.securityfocus.com/archive/1/443216/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/28383