CVE-2006-3855: Medium severity IBM Informix Dynamic Server vulnerability
The ifxloadinternal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3855?
CVE-2006-3855 has a medium severity rating due to the potential for remote code execution by authenticated users.
How do I fix CVE-2006-3855?
To mitigate CVE-2006-3855, upgrade to the latest version of IBM Informix Dynamic Server that includes security patches addressing this vulnerability.
Who is affected by CVE-2006-3855?
CVE-2006-3855 affects users of IBM Informix Dynamic Server versions 9.40.uc1, 9.40.uc2, 9.40.uc3, 9.40.uc5, 9.40.tc5, and 10.0.
Can CVE-2006-3855 be exploited remotely without authentication?
No, CVE-2006-3855 requires remote authenticated access to exploit the vulnerability.
What type of attack does CVE-2006-3855 enable?
CVE-2006-3855 enables attackers to execute arbitrary C code on the server through user-defined routines (UDRs).