{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-08-01T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772)."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921"}, {"name": "20060814 Informix - Discovery, Attack and Defense", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/443133/100/0/threaded"}, {"name": "20060814 Multiple Password Exposures Flaws", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/443195/100/0/threaded"}, {"name": "informix-plaintext-password(28132)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132"}, {"tags": ["x_refsource_MISC"], "url": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf"}, {"name": "21301", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21301"}, {"name": "19264", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19264"}, {"name": "27691", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/27691"}, {"name": "ADV-2006-3077", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3077"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3858", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772)."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921", "refsource": "CONFIRM", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921"}, {"name": "20060814 Informix - Discovery, Attack and Defense", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/443133/100/0/threaded"}, {"name": "20060814 Multiple Password Exposures Flaws", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/443195/100/0/threaded"}, {"name": "informix-plaintext-password(28132)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132"}, {"name": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf", "refsource": "MISC", "url": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf"}, {"name": "21301", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21301"}, {"name": "19264", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19264"}, {"name": "27691", "refsource": "OSVDB", "url": "http://www.osvdb.org/27691"}, {"name": "ADV-2006-3077", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3077"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:48:39.214Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921"}, {"name": "20060814 Informix - Discovery, Attack and Defense", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/443133/100/0/threaded"}, {"name": "20060814 Multiple Password Exposures Flaws", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/443195/100/0/threaded"}, {"name": "informix-plaintext-password(28132)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf"}, {"name": "21301", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21301"}, {"name": "19264", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19264"}, {"name": "27691", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/27691"}, {"name": "ADV-2006-3077", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3077"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3858", "datePublished": "2006-08-08T22:00:00", "dateReserved": "2006-07-26T00:00:00", "dateUpdated": "2024-08-07T18:48:39.214Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:*", "matchCriteriaId": "58A9F81C-C618-435D-9912-0E61EAB02560", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:*", "matchCriteriaId": "CE9B0C17-2D85-4729-85EF-2F5C750BF51B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*", "matchCriteriaId": "910D9A17-43A7-4F9E-98E0-2C465AC8BD2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*", "matchCriteriaId": "1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:*", "matchCriteriaId": "B2CD7B84-2861-4542-8A08-C668065C8DB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc5:*:*:*:*:*:*:*", "matchCriteriaId": "E64D85E2-AA7E-4704-A2FA-BD69744423CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc5:*:*:*:*:*:*:*", "matchCriteriaId": "21FF7CE7-A061-425B-A29B-1EC6DEDA2C10", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:9.40.xc7:*:*:*:*:*:*:*", "matchCriteriaId": "AD626D2D-D1ED-4B44-A236-CF20F1708D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "1716E256-B186-442F-8C4C-9305E0953081", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc1:*:*:*:*:*:*:*", "matchCriteriaId": "5634CF97-CBD3-4CA3-8144-2F875FDD3FA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:informix_dynamic_server:10.0.xc3:*:*:*:*:*:*:*", "matchCriteriaId": "C7931542-8DB8-4BC3-A319-9352EBC62158", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (product defects 171893, 171894, 173772)."}, {"lang": "es", "value": "IBM Informix Dynamic Server (IDS) anterior a 9.40.xC8 y 10.00 anterior a 10.00.xC4 almacena contrase\u00f1as en texto plano en memoria compartida, lo cual permite a usuarios locales obtener contrase\u00f1as leyendo la memoria (defectos de producto 171893, 171894, 173772)."}], "evaluatorSolution": "This vulnerability is addressed in the following product releases:\r\nIBM, Informix IDS, 9.40 xC8\r\nIBM, Informix IDS, 10.00 xC4", "id": "CVE-2006-3858", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-08T22:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/21301"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921"}, {"source": "cve@mitre.org", "url": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/27691"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/443133/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/443195/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/19264"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/3077"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/21301"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21242921"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/27691"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/443133/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/443195/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/19264"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/3077"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28132"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}