Description
Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.
References
- 20070625 Ingres verifydb local stack overflow mailing-list
- ADV-2007-2288 vdb-entry
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-ingres-stack-overflow/
- ingres-uuidfromchar-bo(34995) vdb-entry
- 25756 third-party-advisory
- 25775 third-party-advisory
- ADV-2007-2290 vdb-entry
- ingres-duvegetargs-bo(34998) vdb-entry
- 20070625 Ingres stack overflow in uuid_from_char function mailing-list
- http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp
- http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-stack-overflow/
- 37483 vdb-entry
- 24585 vdb-entry