20070621 Ingres Database Multiple Heap Corruption VulnerabilitiesThird-party advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546 CVE-2007-3334
Ingress Database Server 2.6 - Multiple Remote Vulnerabilities
Record summary
CVE-2007-3334 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIngress Database Server 2.6 - Multiple Remote VulnerabilitiesExploitDB exploitby anonymousNot analyzed1 file
References
Showing 12 of 1537487vdb entry
http://osvdb.org/37487 37488vdb entry
http://osvdb.org/37488 25756Third-party advisory
http://secunia.com/advisories/25756 25775Third-party advisory
http://secunia.com/advisories/25775 supportconnectw.ca.comConfirmation
http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp ca.comConfirmation
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 24585vdb entry
http://www.securityfocus.com/bid/24585 1018278vdb entry
http://www.securitytracker.com/id?1018278 ADV-2007-2288vdb entry
http://www.vupen.com/english/advisories/2007/2288 ADV-2007-2290vdb entry
http://www.vupen.com/english/advisories/2007/2290 ingres-communications-server-bo(34991)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34991