PT-2007-4614 · Actian · Ingres Database Server

Publicado 2007-06-22 · Atualizado 2018-10-16 · CVE-2007-3337

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ingres database server versions 2006 9.0.4, r3, 2.6, and 2.5

Description The issue allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file. This can be exploited by creating a symbolic link to a target file, which can then be truncated by the wakeup function in the Ingres database server.

Recommendations For Ingres database server version 2006 9.0.4, consider restricting access to the alarmwkp.def file to prevent symlink attacks. For Ingres database server version r3, restrict access to the alarmwkp.def file to minimize the risk of exploitation. For Ingres database server version 2.6, avoid using the wakeup function until a fix is available. For Ingres database server version 2.5, restrict access to the alarmwkp.def file to prevent exploitation.

Correção

Identificadores relacionados

CVE-2007-3337

Produtos afetados

Ingres Database Server

Referências · 12

• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 · Nota
• http://ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-file-truncation · Nota
• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35451 · Nota
• http://vupen.com/english/advisories/2007/2290 · Nota
• http://osvdb.org/37485 · Nota
• http://secunia.com/advisories/25756 · Nota
• http://securityfocus.com/archive/1/472200/100/0/threaded · Nota
• http://secunia.com/advisories/25775 · Nota
• http://securityfocus.com/bid/24585 · Nota
• http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp · Correção
• http://vupen.com/english/advisories/2007/2288 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3337 · Nota de Segurança