CVE-2006-3861: Medium severity IBM Informix Dynamic Server vulnerability
Published Aug 8, 2006
·Updated
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
Affected Software
10 affected components
IBM Informix Dynamic Server=9.40.uc3
IBM Informix Dynamic Server=9.40.uc2
IBM Informix Dynamic Server=9.40.tc5
IBM Informix Dynamic Server=9.40.xc5
IBM Informix Dynamic Server=9.40.uc1
IBM Informix Dynamic Server=10.0.xc1
IBM Informix Dynamic Server=10.0
IBM Informix Dynamic Server=9.4
IBM Informix Dynamic Server=7.31
IBM Informix Dynamic Server=9.40.uc5
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 8, 2006
CVE Published
10:04 PM
Aug 9, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3861?
CVE-2006-3861 is considered a medium severity vulnerability due to the potential for unauthorized database creation by authenticated users.
2
How do I fix CVE-2006-3861?
To fix CVE-2006-3861, upgrade IBM Informix Dynamic Server to version 9.40.xC7 or 10.00.xC3 or later.
3
What versions of IBM Informix Dynamic Server are affected by CVE-2006-3861?
CVE-2006-3861 affects versions of IBM Informix Dynamic Server prior to 9.40.xC7 and 10.00.xC3.
4
Can remote users exploit CVE-2006-3861?
Yes, remote authenticated users can exploit CVE-2006-3861 to create arbitrary databases.
5
What is the impact of CVE-2006-3861 on data security?
The impact of CVE-2006-3861 on data security includes unauthorized database creation, which may lead to data loss or corruption.