vulnwire
10.0crit

CVE-2007-33361 exploit

Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Compu…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.0%
percentile 95%
Public exploits
1
Exploit-DB

Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.

Exploit prediction (EPSS)

8.96% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-14646 CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC) · dos · 2010-08-14

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • vupen.com /english/advisories/2007/2288 · vdb-entry, x_refsource_VUPEN, x_transferred
  • ca.com /us/securityadvisor/newsinfo/collateral.aspx?cid=145778 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/25756 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25775 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/2290 · vdb-entry, x_refsource_VUPEN, x_transferred
  • supportconnectw.ca.com /public/ca_common_docs/ingresvuln_letter.asp · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/34993 · vdb-entry, x_refsource_XF, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35000 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/24585 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /37486 · vdb-entry, x_refsource_OSVDB, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2007-06/0302.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/472193/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • ngssoftware.com /advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/ · x_refsource_MISC, x_transferred
  • ngssoftware.com /advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/ · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.