NVD

Id
55488  
Name
CVE-2007-3336  
Description
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-22  
Modified Date
2012-10-30  
Seq
2007-3336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281970 55488 CVE-2007-3336 20070625 Ingres Unauthenticated Pointer Overwrite 1  View
281971 55488 CVE-2007-3336 http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp  View
281972 55488 CVE-2007-3336 http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778  View
281973 55488 CVE-2007-3336 http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/  View
281974 55488 CVE-2007-3336 http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/  View
281975 55488 CVE-2007-3336 20070625 Ingres Unauthenticated Pointer Overwrite 2  View
281976 55488 CVE-2007-3336 24585  View
281977 55488 CVE-2007-3336 ADV-2007-2288  View
281978 55488 CVE-2007-3336 ADV-2007-2290  View
281979 55488 CVE-2007-3336 ingres-unspecified-code-execution(34993)  View
281980 55488 CVE-2007-3336 ingres-pointer-code-execution(35000)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55335 JVNDB-2007-004027 CA 製品で使用される Ingres database server における任意のコードを実行される脆弱性 CA (前 Computer Associates) 製品で使用される Ingres database server は、"ポインタ上書き" の不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2007-3336 26691 CVE-2007-3336 55488 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004027.html 2007-06-21 2012-09-25 View