PT-2007-4613 · Actian · Ingres Database Server

Published 2007-06-22 · Updated 2018-10-16 · CVE-2007-3336

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ingres database server versions 2.5 through 2006 9.0.4

Description The issue allows remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.

Recommendations For Ingres database server versions 2.5 through 2006 9.0.4, consider restricting access to the iigcc process until a patch is available. As a temporary workaround, consider disabling the QUinsert and QUremove functions until a fix is provided. Avoid sending certain TCP data to the Ingres Communications Server Process to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3336

Affected Products

Ingres Database Server

References · 16

• 🔥 https://exploit-db.com/exploits/14646 · Exploit
• http://vupen.com/english/advisories/2007/2288 · Vendor Advisory
• http://secunia.com/advisories/25775 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2290 · Vendor Advisory
• http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3336 · Security Note
• http://secunia.com/advisories/25756 · Vendor Advisory
• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 · Note
• http://ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1 · Note
• http://securityfocus.com/archive/1/472193/100/0/threaded · Note
• http://ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35000 · Note
• http://securityfocus.com/bid/24585 · Note
• http://osvdb.org/37486 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34993 · Note