CVEvulnerability
CVE-2007-6334
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
Affected configurations
• ingres ingres 2.5
• ingres ingres 2.6
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/28183 Patch, Vendor Advisory
- http://secunia.com/advisories/28187 Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp supportconnectw.ca.com
- http://www.ingres.com/support/security-alertDec17.php www.ingres.com
- http://www.osvdb.org/39358 www.osvdb.org
- http://www.securityfocus.com/archive/1/485448/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26959 Patch
- http://www.securitytracker.com/id?1019134 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4303 www.vupen.com
- http://www.vupen.com/english/advisories/2007/4304 www.vupen.com
- http://secunia.com/advisories/28183 Patch, Vendor Advisory
- http://secunia.com/advisories/28187 Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp supportconnectw.ca.com
- http://www.ingres.com/support/security-alertDec17.php www.ingres.com
- http://www.osvdb.org/39358 www.osvdb.org
- http://www.securityfocus.com/archive/1/485448/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26959 Patch
- http://www.securitytracker.com/id?1019134 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4303 www.vupen.com
- http://www.vupen.com/english/advisories/2007/4304 www.vupen.com