CVE

Id
33474  
CVE No.
CVE-2008-3357  
Status
Candidate  
Description
Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."  
Phase
Assigned (20080728)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
364495 33474 CVE-2008-3357 IDEFENSE:20080801 Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability  View
364496 33474 CVE-2008-3357 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733  View
364497 33474 CVE-2008-3357 BUGTRAQ:20080806 CA Products That Embed Ingres Multiple Vulnerabilities  View
364498 33474 CVE-2008-3357 URL:http://www.securityfocus.com/archive/1/archive/1/495177/100/0/threaded  View
364499 33474 CVE-2008-3357 CONFIRM:http://www.ingres.com/support/security-alert-080108.php  View
364500 33474 CVE-2008-3357 CONFIRM:https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989  View
364501 33474 CVE-2008-3357 BID:30512  View
364502 33474 CVE-2008-3357 URL:http://www.securityfocus.com/bid/30512  View
364503 33474 CVE-2008-3357 VUPEN:ADV-2008-2292  View
364504 33474 CVE-2008-3357 URL:http://www.vupen.com/english/advisories/2008/2292  View
364505 33474 CVE-2008-3357 VUPEN:ADV-2008-2313  View
364506 33474 CVE-2008-3357 URL:http://www.vupen.com/english/advisories/2008/2313  View
364507 33474 CVE-2008-3357 SECTRACK:1020614  View
364508 33474 CVE-2008-3357 URL:http://securitytracker.com/id?1020614  View
364509 33474 CVE-2008-3357 SECUNIA:31357  View
364510 33474 CVE-2008-3357 URL:http://secunia.com/advisories/31357  View
364511 33474 CVE-2008-3357 SECUNIA:31398  View
364512 33474 CVE-2008-3357 URL:http://secunia.com/advisories/31398  View
364513 33474 CVE-2008-3357 XF:ingres-ingvalidpw-code-execution(44181)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49375 JVNDB-2008-004685 IntelliTamper におけるスタックベースのバッファオーバーフローの脆弱性 IntelliTamper には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3361 33474 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004685.html  View