CVE-2006-3855

MEDIUM 6.5CVE-2006-3855 · Published 08/08/2006 · updated 16/06/2026

In short

CVE-2006-3855 is a MEDIUM (CVSS 6.5) vulnerability affecting informix dynamic server (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
informix dynamic server ibm	`= 10.0= 10.0.xc3= 9.4= 9.40.tc5= 9.40.uc1= 9.40.uc2= 9.40.uc3= 9.40.uc5`	No fix yet

Description

The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."

References

secunia.com/advisories/21301
www-1.ibm.com/support/docview.wss · Not Applicable
databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf · Broken Link
osvdb.org/27689 · Broken Link
securityfocus.com/archive/1/443133/100/0/threaded
securityfocus.com/archive/1/443184/100/0/threaded
securityfocus.com/bid/19264 · Patch
vupen.com/english/advisories/2006/3077 · Permissions Required
exchange.xforce.ibmcloud.com/vulnerabilities/28129

More vulnerabilities in informix dynamic server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

informix dynamic server

ibm

= 10.0= 10.0.xc3= 9.4= 9.40.tc5= 9.40.uc1= 9.40.uc2= 9.40.uc3= 9.40.uc5

No fix yet

More vulnerabilities in informix dynamic server

See all →