CVE-2006-5163 : IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other version

IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.

Published 2006-10-05 04:04:00

Updated 2018-10-17 21:41:31

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-5163

IBM » Informix Dynamic Server » Version: 10.uc Rc1 Trial Linux Edition
cpe:2.3:a:ibm:informix_dynamic_server:10.uc_rc1:*:trial_linux:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-5163

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-5163

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
3.6	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:P	3.9	4.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-5163

Jump to

Vulnerability Details : CVE-2006-5163

Products affected by CVE-2006-5163

Exploit prediction scoring system (EPSS) score for CVE-2006-5163

CVSS scores for CVE-2006-5163

References for CVE-2006-5163