Published: 22/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote malicious users to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ingres database server r3
ingres database server 2.5
ingres database server 2.6
ingres database server 9.0.4

Computer Associates Advantage Ingres version 26 suffers from multiple denial of service vulnerabilities ...

CWE-119 http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 http://www.securityfocus.com/bid/24585 http://secunia.com/advisories/25775 http://secunia.com/advisories/25756 http://www.vupen.com/english/advisories/2007/2288 http://www.vupen.com/english/advisories/2007/2290 http://osvdb.org/37483 https://exchange.xforce.ibmcloud.com/vulnerabilities/34998 https://exchange.xforce.ibmcloud.com/vulnerabilities/34995 http://www.securityfocus.com/archive/1/472197/100/0/threaded http://www.securityfocus.com/archive/1/472194/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/92818/Computer-Associates-Advantage-Ingres-2.6-Denial-Of-Service.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3338

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect