CVE-2007-3337

4 documents4 sources
Severity
2.1LOW
EPSS
0.1%
top 77.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Ingres Database Server
Timeline
PublishedJun 22
Latest updateMay 1

Description

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDingres/database_server4 versions+3

Patches

Patch: supportconnectw.ca.com ↗Patch: supportconnectw.ca.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vxqm-jmmw-cfg4: wakeup in Ingres database server 2006 9↗2022-05-01
▶
CVEList
CVE-2007-3337: wakeup in Ingres database server 2006 9↗2007-06-22
▶

💥Exploits & PoCs

1
Exploit-DB
Ingress Database Server 2.6 - Multiple Remote Vulnerabilities↗2007-06-21
▶
CVE-2007-3337 (LOW CVSS 2.1) | wakeup in Ingres database server 20 | cvebase.io