Published: 22/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ingres database server 2.6
ingres database server r3
ingres database server 9.0.4
ingres database server 2.5

Computer Associates Advantage Ingres version 26 suffers from multiple denial of service vulnerabilities ...

NVD-CWE-Other http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-file-truncation/http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35451 http://www.securityfocus.com/bid/24585 http://secunia.com/advisories/25775 http://secunia.com/advisories/25756 http://www.vupen.com/english/advisories/2007/2290 http://www.vupen.com/english/advisories/2007/2288 http://osvdb.org/37485 http://www.securityfocus.com/archive/1/472200/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/92818/Computer-Associates-Advantage-Ingres-2.6-Denial-Of-Service.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3337

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect