CVE-2007-3337 wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwk...
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ingres database server | = 2.5 | No fix listed |
| ingres database server | = 2.6 | No fix listed |
| ingres database server | = 9.0.4 | No fix listed |
| ingres database server | = r3 | No fix listed |
References
- 37485 vdb-entry
- 25756 third-party-advisory
- 25775 third-party-advisory
- supportconnectw.ca.com patch
- www.ca.com
- www.ca.com
- www.ngssoftware.com
- 20070625 Ingres wakeup setuid(ingres) file truncation mailing-list
- 24585 vdb-entry
- ADV-2007-2288 vdb-entry
- ADV-2007-2290 vdb-entry