Vulnerability Details : CVE-2006-3859

IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.

Published 2006-08-17 01:04:00

Updated 2018-10-17 21:32:01

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-3859

Probability of exploitation activity in the next 30 days: 0.42%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 71 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-3859

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N	8.0	2.9	nvd@nist.gov
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2006-3859

Products affected by CVE-2006-3859

IBM » Informix Dynamic Database Server » Version: 10.00.tc4
cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc4:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 10.00.tc5
cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc5:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 9.40.tc7
cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc7:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 9.40.tc8
cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc8:*:*:*:*:*:*:*
Matching versions