CVE-2006-3859: IBM Informix Dynamic Database Server

Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days.

IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.

Affected products

• IBM Informix Dynamic Database Server: version 9.40.tc7 only; version 9.40.tc8 only; version 10.00.tc4 only; version 10.00.tc5 only

Published 2006-08-17. Last modified 2026-06-16.