CVE-2007-6334

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-20 · updated 2026-06-16
Weakness: CWE-264

Description

Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.

Affected products

Ingres: 2.5, 2.6

References

http://secunia.com/advisories/28183
http://secunia.com/advisories/28187
http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp
http://www.ingres.com/support/security-alertDec17.php
http://www.osvdb.org/39358
http://www.securityfocus.com/archive/1/485448/100/0/threaded
http://www.securityfocus.com/bid/26959
http://www.securitytracker.com/id?1019134
http://www.vupen.com/english/advisories/2007/4303
http://www.vupen.com/english/advisories/2007/4304
http://secunia.com/advisories/28183
http://secunia.com/advisories/28187

Get alerted when CVE-2007-6334 or the next vulnerability affects your stack