Published: 22/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote malicious users to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ingres database server 9.0.4
ingres database server r3
ingres database server 2.5
ingres database server 2.6

# Exploit Title: Computer Associates Advantage Ingres 26 Multiple Buffer Overflow Vulnerabilities PoC # Date: 2010-08-14 # Author: @fdiskyou # e-mail: rui at deniableorg # Version: 26 # Tested on: Windows 2003 Server SP1 en # CVE: CVE-2007-3336 - CVE-2007-3338 # Notes: Fixed in the last version # iigcc - EDX holds a pointer that's overwritten a ...

Computer Associates Advantage Ingres version 26 suffers from multiple denial of service vulnerabilities ...

NVD-CWE-Other http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp http://archives.neohapsis.com/archives/bugtraq/2007-06/0302.html http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 http://www.securityfocus.com/bid/24585 http://secunia.com/advisories/25775 http://secunia.com/advisories/25756 http://www.vupen.com/english/advisories/2007/2288 http://www.vupen.com/english/advisories/2007/2290 http://osvdb.org/37486 https://exchange.xforce.ibmcloud.com/vulnerabilities/35000 https://exchange.xforce.ibmcloud.com/vulnerabilities/34993 http://www.securityfocus.com/archive/1/472193/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/14646/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3336

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect