CVE-2007-3334 Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates...
HighCVSS 10.0
EPSS 10.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca etrust secure content manager | = 8.0 | No fix listed |
| ingres database server | = 3.0.3 | No fix listed |
References
- 20070621 Ingres Database Multiple Heap Corruption Vulnerabilities patch third-party-advisory
- 37487 vdb-entry
- 37488 vdb-entry
- 25756 third-party-advisory
- 25775 third-party-advisory
- supportconnectw.ca.com
- www.ca.com
- 24585 vdb-entry
- 1018278 vdb-entry
- ADV-2007-2288 vdb-entry
- ADV-2007-2290 vdb-entry
- ingres-communications-server-bo(34991) vdb-entry
- ingres-data-access-server-bo(34992) vdb-entry
- ingres-wakeup-privilege-escalation(35002) vdb-entry