CVE-2007-3338: Buffer Overflow

Published Jun 22, 2007

Updated

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuidfromchar or (2) duvegetargs functions.

Affected Software

4 affected components

Ingres Database Server=2.5

Ingres Database Server=2.6

Ingres Database Server=9.0.4

Ingres Database Server=r3

Remediation

Patch Available

http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp

Event History

Jun 22, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3338?

CVE-2007-3338 is considered a high-severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-3338?

To mitigate CVE-2007-3338, it is essential to upgrade to the latest version of the Ingres database server that contains security patches.

What versions of Ingres are affected by CVE-2007-3338?

CVE-2007-3338 affects Ingres database server versions 2.5, 2.6, r3, and 9.0.4.

Can CVE-2007-3338 be exploited remotely?

Yes, CVE-2007-3338 allows remote attackers to exploit the vulnerability without needing local access.

What functions are associated with CVE-2007-3338?

CVE-2007-3338 is specifically related to buffer overflows in the uuid_from_char and duve_get_args functions.