Required CVE Record Information
Description
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases.
References 9 Total
- securityfocus.com: 20060814 Unauthorized Database Creation Privilege on Informix mailing-list
- http://www-1.ibm.com/support/docview.wss?uid=swg21242921
- securityfocus.com: 20060814 Informix - Discovery, Attack and Defense mailing-list
- osvdb.org: 27692 vdb-entry
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
- exchange.xforce.ibmcloud.com: informix-database-insecure-permission(28148) vdb-entry
- secunia.com: 21301 third-party-advisory
- securityfocus.com: 19264 vdb-entry
- vupen.com: ADV-2006-3077 vdb-entry
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 9 Total
- securityfocus.com: 20060814 Unauthorized Database Creation Privilege on Informix mailing-listx_transferred
- http://www-1.ibm.com/support/docview.wss?uid=swg21242921 x_transferred
- securityfocus.com: 20060814 Informix - Discovery, Attack and Defense mailing-listx_transferred
- osvdb.org: 27692 vdb-entryx_transferred
- http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf x_transferred
- exchange.xforce.ibmcloud.com: informix-database-insecure-permission(28148) vdb-entryx_transferred
- secunia.com: 21301 third-party-advisoryx_transferred
- securityfocus.com: 19264 vdb-entryx_transferred
- vupen.com: ADV-2006-3077 vdb-entryx_transferred