CVE-2007-3337

Published: Jun 22, 2007Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.

Affected (4)

Products: Ingres: Database Server

Ingres

1 product

Database Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ingres Database Server	Version 2.5
Ingres Database Server	Version 2.6
Ingres Database Server	Version 9.0.4
Ingres Database Server	Version r3

References (22)

http://osvdb.org/37485

Source: cve@mitre.org

http://secunia.com/advisories/25756

Source: cve@mitre.org

http://secunia.com/advisories/25775

Source: cve@mitre.org

http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp

Source: cve@mitre.org

Patch

http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778

Source: cve@mitre.org

http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35451

Source: cve@mitre.org

http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-ingres-file-truncation/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/472200/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24585

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2288

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2290

Source: cve@mitre.org

http://osvdb.org/37485