Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Ingres Component: Ingres Clear all filters
TI-2008-03250 CVE-2008-3389 · GHSA-95vq-m8f4-gh6c

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release…

Priority LOW 22

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long va…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00444 Published 2008-08-05 No fix listed CWE-119
TI-2008-03217 CVE-2008-3356 · GHSA-cgvm-rcgv-pjm9

verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka…

Priority LOW 21

verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the a…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00374 Published 2008-08-05 No fix listed CWE-264
TI-2007-06041 CVE-2007-6334 · GHSA-5c6j-4cmg-9vw5

Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other…

Priority LOW 26

Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2007-12-20 No fix listed CWE-264