Vulnerability CVE-2005-3642

Vulnerability CVE-2005-3642

Published: 2005-11-16 Modified: 2012-02-12

Description:

IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
IBM -> Informix dynamic database server

References:

http://www.securityfocus.com/bid/15451

http://www.ngssoftware.com/papers/database-on-xp.pdf

Copyright 2024, cxsecurity.com