← Back to CVEs
CVE-2006-3858
N/ADescription
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772).
CVE Details
CVSS v3.1 ScoreN/A
Published8/8/2006
Last Modified4/16/2026
Sourcenvd
Honeypot Sightings0
Affected Products
ibm:informix_dynamic_server
References
http://secunia.com/advisories/21301(cve@mitre.org)
http://www-1.ibm.com/support/docview.wss?uid=swg21242921(cve@mitre.org)
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf(cve@mitre.org)
http://www.osvdb.org/27691(cve@mitre.org)
http://www.securityfocus.com/archive/1/443133/100/0/threaded(cve@mitre.org)
http://www.securityfocus.com/archive/1/443195/100/0/threaded(cve@mitre.org)
http://www.securityfocus.com/bid/19264(cve@mitre.org)
http://www.vupen.com/english/advisories/2006/3077(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28132(cve@mitre.org)
http://secunia.com/advisories/21301(af854a3a-2127-422b-91ae-364da2661108)
http://www-1.ibm.com/support/docview.wss?uid=swg21242921(af854a3a-2127-422b-91ae-364da2661108)
http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/27691(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/443133/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/443195/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19264(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3077(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28132(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.