CVEvulnerability
CVE-2007-3338
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.
Affected configurations
• ingres database server 2.5
• ingres database server 2.6
• ingres database server 9.0.4
• ingres database server r3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/37483 osvdb.org
- http://secunia.com/advisories/25756 Vendor Advisory
- http://secunia.com/advisories/25775 Vendor Advisory
- http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp Patch
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 www.ca.com
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/ www.ngssoftware.com
- http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/ www.ngssoftware.com
- http://www.securityfocus.com/archive/1/472194/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/472197/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24585 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2288 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2290 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34995 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34998 exchange.xforce.ibmcloud.com
- http://osvdb.org/37483 osvdb.org
- http://secunia.com/advisories/25756 Vendor Advisory
- http://secunia.com/advisories/25775 Vendor Advisory
- http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp Patch
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 www.ca.com
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/ www.ngssoftware.com
- http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/ www.ngssoftware.com
- http://www.securityfocus.com/archive/1/472194/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/472197/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24585 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2288 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2290 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34995 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34998 exchange.xforce.ibmcloud.com