CVE-2006-3855
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated...
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
Exploit likelihood
What each source reports
NVD Score used
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
- Record
CVE-2006-3855- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
- Record
CVE-2006-3855- Updated
- 2026-11-02
EUVDEUVD-2006-3849 No score
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
- Record
EUVD-2006-3849- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9cg4-76c7-grpg No score
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated...
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitrary C code via the DllMain or _init function in a library, aka "C code UDR."
- Record
GHSA-9cg4-76c7-grpg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3855 is a medium vulnerability (CVSS 6.5) in Ibm Informix Dynamic Server, published August 8, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 80th percentile. No source names a fixed version.
References
www-1.ibm.com/support/docview.wss?uid=swg21242921
securityfocus.com/archive/1/443133/100/0/threaded
databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf
exchange.xforce.ibmcloud.com/vulnerabilities/28129
secunia.com/advisories/21301