CVE-2007-3336

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.0%

from disclosure to weapon1149 days

Published on NVDJun 22

1st PoC+1149d

exploitation probability

9.0%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/14646

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/bugtraq/2007-06/0302.html http://osvdb.org/37486 http://secunia.com/advisories/25756 http://secunia.com/advisories/25775 https://exchange.xforce.ibmcloud.com/vulnerabilities/34993 https://exchange.xforce.ibmcloud.com/vulnerabilities/35000 http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778 http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/http://www.securityfocus.com/archive/1/472193/100/0/threaded http://www.securityfocus.com/bid/24585