Unrated severityNVD Advisory· Published Aug 8, 2006· Updated Jun 16, 2026
CVE-2006-3857
CVE-2006-3857
Description
Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc1:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:10.00.tc2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.uc3:*:*:*:*:*:*:*
- (no CPE)range: < 9.40.TC6, < 10.00.TC3
Patches
Vulnerability mechanics
References
19- secunia.com/advisories/21301nvdPatchVendor Advisory
- www-1.ibm.com/support/docview.wssnvdPatch
- www.securityfocus.com/bid/19264nvdPatch
- www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdfnvd
- www.osvdb.org/27681nvd
- www.osvdb.org/27682nvd
- www.osvdb.org/27683nvd
- www.osvdb.org/27687nvd
- www.osvdb.org/27688nvd
- www.osvdb.org/27693nvd
- www.securityfocus.com/archive/1/443133/100/0/threadednvd
- www.securityfocus.com/archive/1/443210/100/0/threadednvd
- www.vupen.com/english/advisories/2006/3077nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28118nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28119nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28120nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28126nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28127nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28157nvd
News mentions
0No linked articles in our index yet.