CVE-2006-3859 : IBM Informix Dynamic Server (IDS) allows remote authenticated users to create an

IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.

Published 2006-08-17 01:04:00

Updated 2018-10-17 21:32:01

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-3859

IBM » Informix Dynamic Database Server » Version: 10.00.tc4
cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc4:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 10.00.tc5
cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc5:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 9.40.tc7
cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc7:*:*:*:*:*:*:*
Matching versions
IBM » Informix Dynamic Database Server » Version: 9.40.tc8
cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc8:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-3859

EPSS FAQ

0.34%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 71 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-3859

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2006-3859

Jump to

Vulnerability Details : CVE-2006-3859

Products affected by CVE-2006-3859

Exploit prediction scoring system (EPSS) score for CVE-2006-3859

CVSS scores for CVE-2006-3859

References for CVE-2006-3859