CVE-2007-3338

Sažetak

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.

Reference

http://osvdb.org/37483
http://secunia.com/advisories/25756
http://secunia.com/advisories/25775
http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778
http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/
http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/
http://www.securityfocus.com/archive/1/472194/100/0/threaded
http://www.securityfocus.com/archive/1/472197/100/0/threaded
http://www.securityfocus.com/bid/24585
http://www.vupen.com/english/advisories/2007/2288
http://www.vupen.com/english/advisories/2007/2290
https://exchange.xforce.ibmcloud.com/vulnerabilities/34995
https://exchange.xforce.ibmcloud.com/vulnerabilities/34998

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

16-10-2018 - 16:48

Objavljeno

22-06-2007 - 18:30