CVE

Id
33506  
CVE No.
CVE-2008-3389  
Status
Candidate  
Description
Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.  
Phase
Assigned (20080730)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
364832 33506 CVE-2008-3389 IDEFENSE:20080801 Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability  View
364833 33506 CVE-2008-3389 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=732  View
364834 33506 CVE-2008-3389 BUGTRAQ:20080806 CA Products That Embed Ingres Multiple Vulnerabilities  View
364835 33506 CVE-2008-3389 URL:http://www.securityfocus.com/archive/1/archive/1/495177/100/0/threaded  View
364836 33506 CVE-2008-3389 CONFIRM:http://www.ingres.com/support/security-alert-080108.php  View
364837 33506 CVE-2008-3389 CONFIRM:https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989  View
364838 33506 CVE-2008-3389 BID:30512  View
364839 33506 CVE-2008-3389 URL:http://www.securityfocus.com/bid/30512  View
364840 33506 CVE-2008-3389 VUPEN:ADV-2008-2292  View
364841 33506 CVE-2008-3389 URL:http://www.vupen.com/english/advisories/2008/2292  View
364842 33506 CVE-2008-3389 VUPEN:ADV-2008-2313  View
364843 33506 CVE-2008-3389 URL:http://www.vupen.com/english/advisories/2008/2313  View
364844 33506 CVE-2008-3389 SECTRACK:1020615  View
364845 33506 CVE-2008-3389 URL:http://securitytracker.com/id?1020615  View
364846 33506 CVE-2008-3389 SECUNIA:31357  View
364847 33506 CVE-2008-3389 URL:http://secunia.com/advisories/31357  View
364848 33506 CVE-2008-3389 SECUNIA:31398  View
364849 33506 CVE-2008-3389 URL:http://secunia.com/advisories/31398  View
364850 33506 CVE-2008-3389 XF:ingres-libbecompat-bo(44179)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49385 JVNDB-2008-004695 BookMine の events.cfm における SQL インジェクションの脆弱性 BookMine の events.cfm には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3393 33506 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004695.html  View