Unscored severity · published Nov 3, 2006
CVE-2006-5663
IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which…
–
CVSS
0.3%
EPSS
No
On KEV
Description
IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permissions for installation scripts, which allows local users to gain privileges by modifying the scripts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
Informix Client Sdk · Ibm
2.90 · source: NVD
ID
Informix Dynamic Server · Ibm
10.00 · source: NVD
II
Informix I-connect · Ibm
2.90 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5663
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5663
Patch
http://secunia.com/advisories/22609
securitytracker.com
http://securitytracker.com/id?1017156
Patch
http://www-1.ibm.com/support/docview.wss?uid=swg21247438
www.vupen.com
http://www.vupen.com/english/advisories/2006/4280
More from Informix Client Sdk
–
CVE-2009-3691
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code…
–
CVE-2006-5664
The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 allows local users to "compromise…