CVE-2007-3338

CWE-119 — Buffer Overflow4 documents4 sources
Severity
10.0CRITICAL
EPSS
20.6%
top 4.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Ingres Database Server
Timeline
PublishedJun 22
Latest updateMay 1

Description

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDingres/database_server4 versions+3

Patches

Patch: supportconnectw.ca.com ↗Patch: supportconnectw.ca.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hg2r-f4fp-pm95: Multiple stack-based buffer overflows in Ingres database server 2006 9↗2022-05-01
▶
CVEList
CVE-2007-3338: Multiple stack-based buffer overflows in Ingres database server 2006 9↗2007-06-22
▶

💥Exploits & PoCs

1
Exploit-DB
CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC)↗2010-08-14
▶
CVE-2007-3338 (CRITICAL CVSS 10) | Multiple stack-based buffer overflo | cvebase.io