Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm informix dynamic server 9.40.uc2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-2489
Format string vulnerability in IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.
Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2
NA
CVE-2004-2131
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and previous versions allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
Ibm Informix Extended Parallel Server 8.40 Uc1Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2
NA
CVE-2005-3642
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote malicious users to bypass authentication and log on to the guest account by supplying an invalid username.
Ibm Informix Dynamic Database Server 9.40.uc1Ibm Informix Dynamic Database Server 9.40.uc2Ibm Informix Dynamic Database Server 9.40.uc3Ibm Informix Dynamic Database Server 9.3
NA
CVE-2004-2319
IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.
Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Extended Parallel Server 8.40 Uc1Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Extended Parallel Server 8.40 Uc2
NA
CVE-2004-2490
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.
Ibm Informix Extended Parallel Server 8.40 Uc2Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Extended Parallel Server 8.40 Uc1
NA
CVE-2006-3855
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
Ibm Informix Dynamic Server 9.40.uc3Ibm Informix Dynamic Server 9.40.uc5Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Dynamic Server 10.0Ibm Informix Dynamic Server 10.0.xc3Ibm Informix Dynamic Server 9.4Ibm Informix Dynamic Server 9.40.tc5
NA
CVE-2006-3853
Buffer overflow in IBM Informix Dynamic Server (IDS) prior to 9.40.TC7 and 10.00 prior to 10.00.TC3, when running on Windows, allows remote malicious users to execute arbitrary code via a long username.
Ibm Informix Dynamic Server 9.4Ibm Informix Dynamic Server 9.40.tc5Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Dynamic Server 10.0Ibm Informix Dynamic Server 10.0.xc3Ibm Informix Dynamic Server 9.40.xc7Ibm Informix Dynamic Server 9.40.uc3Ibm Informix Dynamic Server 9.40.uc5
NA
CVE-2006-3856
IBM Informix Dynamic Server (IDS) prior to 9.40.xC7 and 10.00 prior to 10.00.xC3 allows local users to cause a denial of service (crash) via unspecified vectors.
Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Dynamic Server 9.40.uc3Ibm Informix Dynamic Server 9.40.uc5Ibm Informix Dynamic Server 9.4Ibm Informix Dynamic Server 9.40.tc5Ibm Informix Dynamic Server 10.0Ibm Informix Dynamic Server 10.0.xc1Ibm Informix Dynamic Server 9.40.xc5
NA
CVE-2006-3861
IBM Informix Dynamic Server (IDS) prior to 9.40.xC7 and 10.00 prior to 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
Ibm Informix Dynamic Server 9.4Ibm Informix Dynamic Server 9.40.tc5Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Dynamic Server 10.0.xc1Ibm Informix Dynamic Server 7.31Ibm Informix Dynamic Server 9.40.xc5Ibm Informix Dynamic Server 10.0Ibm Informix Dynamic Server 9.40.uc3Ibm Informix Dynamic Server 9.40.uc5
NA
CVE-2006-3858
IBM Informix Dynamic Server (IDS) prior to 9.40.xC8 and 10.00 prior to 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
Ibm Informix Dynamic Server 10.0Ibm Informix Dynamic Server 9.40.uc3Ibm Informix Dynamic Server 9.40.uc5Ibm Informix Dynamic Server 10.0.xc1Ibm Informix Dynamic Server 10.0.xc3Ibm Informix Dynamic Server 9.40.xc5Ibm Informix Dynamic Server 9.40.xc7Ibm Informix Dynamic Server 9.40.uc1Ibm Informix Dynamic Server 9.40.uc2Ibm Informix Dynamic Server 9.4Ibm Informix Dynamic Server 9.40.tc5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook