NVD

Id
3270  
Name
CVE-2008-3389  
Description
Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-05  
Modified Date
2011-03-07  
Seq
2008-3389  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20663 3270 CVE-2008-3389 20080801 Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability  View
20664 3270 CVE-2008-3389 1020615  View
20665 3270 CVE-2008-3389 http://www.ingres.com/support/security-alert-080108.php  View
20666 3270 CVE-2008-3389 20080806 CA Products That Embed Ingres Multiple Vulnerabilities  View
20667 3270 CVE-2008-3389 30512  View
20668 3270 CVE-2008-3389 ADV-2008-2292  View
20669 3270 CVE-2008-3389 ADV-2008-2313  View
20670 3270 CVE-2008-3389 ingres-libbecompat-bo(44179)  View
20671 3270 CVE-2008-3389 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49383 JVNDB-2008-004693 Linux 上などの Ingres におけるスタックベースのバッファオーバーフローの脆弱性 Linux および HP-UX 上の Ingres の libbecompat ライブラリには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3389 33502 CVE-2008-3389 3270 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004693.html 2008-08-01 2012-09-25 View