CVE-2008-3357 Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a...
HighCVSS 7.2
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| actian ingres | = 2.6 | No fix listed |
| actian ingres | = 9.0.4 | No fix listed |
| actian ingres | = 9.1.0 | No fix listed |
References
- 20080801 Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability broken-link third-party-advisory
- 31357 third-party-advisory
- 31398 third-party-advisory
- 1020614 third-party-advisory vdb-entry
- www.ingres.com vendor-advisory
- 20080806 CA Products That Embed Ingres Multiple Vulnerabilities mailing-list third-party-advisory vdb-entry
- 30512 third-party-advisory vdb-entry
- ADV-2008-2292 third-party-advisory vdb-entry
- ADV-2008-2313 third-party-advisory vdb-entry
- ingres-ingvalidpw-code-execution(44181) third-party-advisory vdb-entry
- support.ca.com broken-link