10.0crit

CVE-2007-3334in critical feed1 exploit

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ing…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.3%
percentile 96%
Public exploits
1
Exploit-DB

Summary

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

Exploit prediction (EPSS)

10.32% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-30224 Ingress Database Server 2.6 - Multiple Remote Vulnerabilities · dos · 2007-06-21

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • vupen.com /english/advisories/2007/2288 · vdb-entry, x_refsource_VUPEN, x_transferred
  • ca.com /us/securityadvisor/newsinfo/collateral.aspx?cid=145778 · x_refsource_CONFIRM, x_transferred
  • labs.idefense.com /intelligence/vulnerabilities/display.php?id=546 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35002 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/25756 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25775 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /37488 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/2290 · vdb-entry, x_refsource_VUPEN, x_transferred
  • supportconnectw.ca.com /public/ca_common_docs/ingresvuln_letter.asp · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34991 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /37487 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securitytracker.com /id?1018278 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34992 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/24585 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.