CVE-2007-3336
23Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 9.0%
de la publicación al arma1149 días
Publicada en NVD22 jun
1ª PoC+1149d
probabilidad de explotación
9.0%top 5% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Computer Associates) products, allow remote attackers to execute arbitrary code by sending certain TCP data at different times to the Ingres Communications Server Process (iigcc), which calls the (1) QUinsert or (2) QUremove functions with attacker-controlled input.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/14646⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://archives.neohapsis.com/archives/bugtraq/2007-06/0302.htmlhttp://osvdb.org/37486http://secunia.com/advisories/25756http://secunia.com/advisories/25775https://exchange.xforce.ibmcloud.com/vulnerabilities/34993https://exchange.xforce.ibmcloud.com/vulnerabilities/35000http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asphttp://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-1/http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-ingres-pointer-overwrite-2/http://www.securityfocus.com/archive/1/472193/100/0/threadedhttp://www.securityfocus.com/bid/24585