CVE-2006-3862

IBM Informix Dynamic Server Buffer Overflow via SQLIDEBUG Environment Variable

Title source: llm

Description

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable (envariable).

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/28158

Patch x_refsource_confirm

http://www-1.ibm.com/support/docview.wss?uid=swg21242921

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/27694

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/443133/100/0/threaded

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/443165/100/0/threaded

Various Sources x_refsource_misc

http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21301

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19264

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/3077

Scores

EPSS 0.0358

EPSS Percentile 88.2%

Details

Status published

Products (5)

ibm/informix_dynamic_server 9.40.tc5

ibm/informix_dynamic_server 9.40.uc5

ibm/informix_dynamic_server 9.40.xc5

ibm/informix_dynamic_server 10.0.tc1

ibm/informix_dynamic_server 10.0.xc1

Published Aug 08, 2006

Tracked Since Feb 18, 2026