CVEブラウザに戻る

CVE-2007-3334

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile8.71th

Published2007年6月21日

Last Modified2026年4月23日

Vulnerability Description

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

Affected Platforms (CPE)

📦

Ca

Etrust Secure Content Manager

= 8.0

📦

Ingres

Database Server

= 3.0.3

References & Advisories

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=546

🔗 http://osvdb.org/37487

🔗 http://osvdb.org/37488

🔗 http://secunia.com/advisories/25756

🔗 http://secunia.com/advisories/25775

🔗 http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp

🔗 http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=145778

🔗 http://www.securityfocus.com/bid/24585

関連する脆弱性情報

CVE-2005-169310.0

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, e...

CVE-2008-254110.0

Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remo...

CVE-2011-075810.0

The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cau...

CVE-2008-19847.8

The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attac...