Unscored severity · published Dec 20, 2007
CVE-2007-6334
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Ingres · Ingres
2.5; 2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6334
Patch
http://secunia.com/advisories/28183
Patch
http://secunia.com/advisories/28187
supportconnectw.ca.com
http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp
www.ingres.com
http://www.ingres.com/support/security-alertDec17.php
www.osvdb.org
http://www.osvdb.org/39358
www.securityfocus.com
http://www.securityfocus.com/archive/1/485448/100/0/threaded
More from Ingres
–
CVE-2008-3356
verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an…
–
CVE-2008-3389
Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local…