CVE-2006-3858 describes a vulnerability in IBM Informix Dynamic Server (IDS) versions prior to 9.40.xC8 and 10.00.xC4, where passwords are stored in plaintext in shared memory. This allows local attackers to access sensitive credentials by reading the memory. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access is required for exploitation and the primary impact is confidentiality. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.4CPE matchmatch criteria | cpe:2.3:a:ibm:informix_dynamic_server:9.4:*:*:*:*:*:*:* | ||
9.40.tc5CPE matchmatch criteria | cpe:2.3:a:ibm:informix_dynamic_server:9.40.tc5:*:*:*:*:*:*:* | ||
9.40.uc1CPE matchmatch criteria | cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:* | ||
9.40.uc2CPE matchmatch criteria | cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:* | ||
9.40.uc3CPE matchmatch criteria | cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.