Vulnerabilities > CVE-2007-3334 - Remote vulnerability in Ingress Database Server

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
microsoft
ca
ingres
critical
exploit available
NVD
Published: 2007-06-21
Updated: 2017-07-29

Summary

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

Vulnerable Configurations

Part Description Count
OS
Microsoft
1
Application
Ca
1
Application
Ingres
1

Exploit-Db

descriptionIngress Database Server 2.6 Multiple Remote Vulnerabilities. CVE-2007-3334 . Dos exploit for windows platform
idEDB-ID:30224
last seen2016-02-03
modified2007-06-21
published2007-06-21
reporteranonymous
sourcehttps://www.exploit-db.com/download/30224/
titleIngress Database Server 2.6 - Multiple Remote Vulnerabilities

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/92818/caadvantageingres-dos.txt
idPACKETSTORM:92818
last seen2016-12-05
published2010-08-17
reporterfdisk
sourcehttps://packetstormsecurity.com/files/92818/Computer-Associates-Advantage-Ingres-2.6-Denial-Of-Service.html
titleComputer Associates Advantage Ingres 2.6 Denial Of Service

Seebug

bulletinFamilyexploit
descriptionNo description provided by source.
idSSV:83664
last seen2017-11-19
modified2014-07-01
published2014-07-01
reporterRoot
sourcehttps://www.seebug.org/vuldb/ssvid-83664
titleIngress Database Server 2.6 - Multiple Remote Vulnerabilities

References