CVE-2006-3853: Buffer Overflow
Published Aug 8, 2006
·Updated
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows, allows remote attackers to execute arbitrary code via a long username.
Affected Software
9 affected components
IBM Informix Dynamic Server=9.4
IBM Informix Dynamic Server=9.40.tc5
IBM Informix Dynamic Server=9.40.uc1
IBM Informix Dynamic Server=9.40.uc2
IBM Informix Dynamic Server=9.40.uc3
IBM Informix Dynamic Server=9.40.uc5
IBM Informix Dynamic Server=9.40.xc7
IBM Informix Dynamic Server=10.0
IBM Informix Dynamic Server=10.0.xc3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 8, 2006
CVE Published
10:04 PM
Aug 9, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3853?
CVE-2006-3853 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2006-3853?
To mitigate CVE-2006-3853, upgrade IBM Informix Dynamic Server to version 9.40.TC7 or 10.00.TC3 or later.
3
Who is affected by CVE-2006-3853?
CVE-2006-3853 affects users of IBM Informix Dynamic Server versions prior to 9.40.TC7 and 10.00.TC3, specifically on Windows.
4
What causes CVE-2006-3853?
CVE-2006-3853 is caused by a buffer overflow vulnerability related to handling long usernames.
5
Can CVE-2006-3853 be exploited remotely?
Yes, CVE-2006-3853 can be exploited by remote attackers without authentication.