Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:informix_dynamic_database_server:9.40.tc5:*:*:*:*:*:*:*

part: a version: 9.40.tc5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInformix Dynamic Database Server (4a2efb1f-59a3-515a-8dea-bb2dd72d537f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3860 vulnerable 2026-06-08 04:49:10.349509 Details available
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.
Published: 2006-08-17T01:00:00.000Z
Updated: 2024-08-07T18:48:39.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3857 vulnerable 2026-06-08 04:49:10.341960 Details available
Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via (1) the getname function, as used by (a) _sq_remview, (b) _sq_remproc, (c) _sq_remperms, (d) _sq_distfetch, and (e) _sq_dcatalog; and the (2) SET DEBUG FILE, (3) IFX_FILE_TO_FILE, (4) FILETOCLOB, (5) LOTOFILE, and (6) DBINFO functions (product defect IDs 171649, 171367, 171387, 171391, 171906, 172179).
Published: 2006-08-08T22:00:00.000Z
Updated: 2024-08-07T18:48:39.422Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.