CVE-2006-3855: IBM Informix Dynamic Server

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."

Affected products

• IBM Informix Dynamic Server: version 9.4 only; version 9.40.tc5 only; version 9.40.uc1 only; version 9.40.uc2 only; version 9.40.uc3 only; version 9.40.uc5 only; …

Published 2006-08-08. Last modified 2026-06-16.