Vulnerability Details : CVE-2006-3853
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2006-3853
Probability of exploitation activity in the next 30 days: 4.60%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 91 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-3853
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
[email protected] |
References for CVE-2006-3853
- http://www.securityfocus.com/bid/19264
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/28122
- http://www-1.ibm.com/support/docview.wss?uid=swg21242921
- http://www.vupen.com/english/advisories/2006/3077
-
http://www.securityfocus.com/archive/1/443149/100/0/threaded
- http://www.securityfocus.com/archive/1/443133/100/0/threaded
Products affected by CVE-2006-3853
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*