VulnerabilityModified
CVE-2006-3859
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
MEDIUM 4.0EPSS 1.11%
Does this matter?
Lower severity and a low EPSS score (1.11%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.11% probability · 64th percentile
- CISA KEV
- Not listed
- Affected
- ibm/informix dynamic database server
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/1408
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdfExploit
- http://www.securityfocus.com/archive/1/443133/100/0/threaded
- http://www.securityfocus.com/archive/1/443216/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28383
- http://securityreason.com/securityalert/1408
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdfExploit
- http://www.securityfocus.com/archive/1/443133/100/0/threaded
- http://www.securityfocus.com/archive/1/443216/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28383
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.