CVE-2005-3642 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Ibm	Informix Dynamic Database Server	9.3

References

http://www.ngssoftware.com/papers/database-on-xp.pdfVendor Advisory
http://www.securityfocus.com/bid/15451
http://www.ngssoftware.com/papers/database-on-xp.pdfVendor Advisory
http://www.securityfocus.com/bid/15451

FAQ

What is CVE-2005-3642?

CVE-2005-3642 is a vulnerability with a CVSS score of 7.5 (HIGH). IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid us...

How severe is CVE-2005-3642?

CVE-2005-3642 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-3642?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Informix Dynamic Database Server.