CVE

Id
33473  
CVE No.
CVE-2008-3356  
Status
Candidate  
Description
verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application"s own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename.  
Phase
Assigned (20080728)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
364476 33473 CVE-2008-3356 IDEFENSE:20080801 Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnerability  View
364477 33473 CVE-2008-3356 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=731  View
364478 33473 CVE-2008-3356 BUGTRAQ:20080806 CA Products That Embed Ingres Multiple Vulnerabilities  View
364479 33473 CVE-2008-3356 URL:http://www.securityfocus.com/archive/1/archive/1/495177/100/0/threaded  View
364480 33473 CVE-2008-3356 CONFIRM:http://www.ingres.com/support/security-alert-080108.php  View
364481 33473 CVE-2008-3356 CONFIRM:https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989  View
364482 33473 CVE-2008-3356 BID:30512  View
364483 33473 CVE-2008-3356 URL:http://www.securityfocus.com/bid/30512  View
364484 33473 CVE-2008-3356 VUPEN:ADV-2008-2292  View
364485 33473 CVE-2008-3356 URL:http://www.vupen.com/english/advisories/2008/2292  View
364486 33473 CVE-2008-3356 VUPEN:ADV-2008-2313  View
364487 33473 CVE-2008-3356 URL:http://www.vupen.com/english/advisories/2008/2313  View
364488 33473 CVE-2008-3356 SECTRACK:1020613  View
364489 33473 CVE-2008-3356 URL:http://securitytracker.com/id?1020613  View
364490 33473 CVE-2008-3356 SECUNIA:31357  View
364491 33473 CVE-2008-3356 URL:http://secunia.com/advisories/31357  View
364492 33473 CVE-2008-3356 SECUNIA:31398  View
364493 33473 CVE-2008-3356 URL:http://secunia.com/advisories/31398  View
364494 33473 CVE-2008-3356 XF:ingres-verifydb-symlink(44177)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49374 JVNDB-2008-004684 IntelliTamper の HTML パーサにおけるスタックベースのバッファオーバーフローの脆弱性 IntelliTamper の HTML パーサには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3360 33473 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004684.html  View