CVE-2006-3857

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-08 · updated 2026-06-16

Description

Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).

Affected products

IBM Informix Dynamic Database Server: 9.3, 9.40.tc1, 9.40.tc2, 9.40.tc3, 9.40.tc4, 9.40.tc5 (+5)

References

http://secunia.com/advisories/21301
http://www-1.ibm.com/support/docview.wss?uid=swg21242921
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
http://www.osvdb.org/27681
http://www.osvdb.org/27682
http://www.osvdb.org/27683
http://www.osvdb.org/27687
http://www.osvdb.org/27688
http://www.osvdb.org/27693
http://www.securityfocus.com/archive/1/443133/100/0/threaded
http://www.securityfocus.com/archive/1/443210/100/0/threaded
http://www.securityfocus.com/bid/19264

Get alerted when CVE-2006-3857 or the next vulnerability affects your stack