Unscored severity · published Jun 21, 2007
CVE-2007-3334
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA…
–
CVSS
10.3%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Database Server · Ingres
3.0.3 · source: NVD
ES
Etrust Secure Content Manager · CA
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3334
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546
osvdb.org
http://osvdb.org/37487
osvdb.org
http://osvdb.org/37488
secunia.com
http://secunia.com/advisories/25756
secunia.com
http://secunia.com/advisories/25775
supportconnectw.ca.com
http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
More from Etrust Secure Content Manager
–
CVE-2011-0758
The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute…
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2008-2541
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attackers to execute arbitrary code or cause a…
–
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…