CVE-2006-3857

IBM Informix Dynamic Server - Multiple Buffer Overflows via getname and SET DEBUG FILE Functions

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).

References (19)

Core 19
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27693
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28119
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27683
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/443133/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27687
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28127
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/443210/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27681
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28118
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28126
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28157
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21301
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19264
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28120
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3077
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27688
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27682

Scores

EPSS 0.0382
EPSS Percentile 89.0%

Details

Status published
Products (11)
ibm/informix_dynamic_database_server 9.3
ibm/informix_dynamic_database_server 9.40.tc1
ibm/informix_dynamic_database_server 9.40.tc2
ibm/informix_dynamic_database_server 9.40.tc3
ibm/informix_dynamic_database_server 9.40.tc4
ibm/informix_dynamic_database_server 9.40.tc5
ibm/informix_dynamic_database_server 9.40.uc1
ibm/informix_dynamic_database_server 9.40.uc2
ibm/informix_dynamic_database_server 9.40.uc3
ibm/informix_dynamic_database_server 10.00.tc1
... and 1 more
Published Aug 08, 2006
Tracked Since Feb 18, 2026