CVE-2006-3860: High severity IBM Informix Dynamic Database server vulnerability
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) startonpload and (3) dbexp functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3860?
CVE-2006-3860 is considered a high-severity vulnerability due to the potential for remote command execution by authenticated users.
How do I fix CVE-2006-3860?
To fix CVE-2006-3860, you should upgrade your IBM Informix Dynamic Server to versions 9.40.xC7 or 10.00.xC3 or later.
Which versions of IBM Informix Dynamic Server are affected by CVE-2006-3860?
CVE-2006-3860 affects IBM Informix Dynamic Server versions prior to 9.40.xC7 and 10.00 prior to 10.00.xC3.
What types of attacks can be executed due to CVE-2006-3860?
CVE-2006-3860 allows remote authenticated users to execute arbitrary commands, potentially leading to unauthorized access and actions.
Who is impacted by CVE-2006-3860?
Any organization utilizing vulnerable versions of IBM Informix Dynamic Server could be at risk of exploitation through CVE-2006-3860.