CVE-2007-6334 Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ingres | = 2.5 | No fix listed |
| ingres | = 2.6 | No fix listed |
References
- 28183 patch third-party-advisory vendor-advisory
- 28187 patch third-party-advisory vendor-advisory
- supportconnectw.ca.com
- www.ingres.com
- 39358 vdb-entry
- 20071221 [CAID 35970]: CA Products That Embed Ingres Authentication Vulnerability mailing-list
- 26959 patch vdb-entry
- 1019134 vdb-entry
- ADV-2007-4303 vdb-entry
- ADV-2007-4304 vdb-entry