Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-3334

4 documents4 sources
Severity
10.0CRITICAL
EPSS
40.5%
top 2.64%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
CA Etrust Secure Content ManagerIngres Database Server
Timeline
PublishedJun 21
Latest updateMay 1

Description

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

Patches

Patch: labs.idefense.com ↗Patch: labs.idefense.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hgwx-v3w7-cwj6: Multiple heap-based buffer overflows in the (1) Communications Server (iigcc↗2022-05-01
▶
CVEList
CVE-2007-3334: Multiple heap-based buffer overflows in the (1) Communications Server (iigcc↗2007-06-21
▶

💥Exploits & PoCs

1
Exploit-DB
Ingress Database Server 2.6 - Multiple Remote Vulnerabilities↗2007-06-21
▶