Unrated severityNVD Advisory· Published Aug 8, 2006· Updated Jun 16, 2026
CVE-2006-3853
CVE-2006-3853
Description
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
Affected products
10cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*
- (no CPE)range: Windows only: <9.40.TC7, <10.00.TC3
Patches
Vulnerability mechanics
References
9- secunia.com/advisories/21301nvdPatchVendor Advisory
- www-1.ibm.com/support/docview.wssnvdPatch
- www.securityfocus.com/bid/19264nvdPatch
- www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdfnvd
- www.osvdb.org/27685nvd
- www.securityfocus.com/archive/1/443133/100/0/threadednvd
- www.securityfocus.com/archive/1/443149/100/0/threadednvd
- www.vupen.com/english/advisories/2006/3077nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28122nvd
News mentions
0No linked articles in our index yet.