Ingres Flawed In User Authentication Unauthorized Access Vulnerability

BID:26959

Info

Ingres Flawed In User Authentication Unauthorized Access Vulnerability

Bugtraq ID: 26959
Class: Access Validation Error
CVE: CVE-2007-6334
Remote: Yes
Local: No
Published: Dec 20 2007 12:00AM
Updated: Mar 19 2015 09:28AM
Credit: The vendor disclosed this issue.
Vulnerable: Ingres Corporation Ingres Database 2.6
Ingres Corporation Ingres Database 2.5
Computer Associates Wily SOA Manager 7.1
Computer Associates Web Service Distributed Management 3.50
Computer Associates Web Service Distributed Management 3.11
Computer Associates Unicenter Workload Control Center 1.0.SP4
Computer Associates Unicenter Workload Control Center 1.0 SP4
Computer Associates Unicenter Workload Control Center 1 SP3
Computer Associates Unicenter TNG 2.5
Computer Associates Unicenter TNG 2.4.2
Computer Associates Unicenter TNG 2.4
Computer Associates Unicenter TNG 2.2
Computer Associates Unicenter TNG 2.1
Computer Associates Unicenter TNG 2.4.2J
Computer Associates Unicenter Software Delivery 11
Computer Associates Unicenter ServicePlus Service Desk 6.0.1
Computer Associates Unicenter ServicePlus Service Desk 6.0
Computer Associates Unicenter ServicePlus Service Desk 5.5.1
Computer Associates Unicenter ServicePlus Service Desk 5.5
Computer Associates Unicenter ServicePlus Service Desk 6.0 SP1
Computer Associates Unicenter ServicePlus Service Desk 5.5 SP3
Computer Associates Unicenter ServicePlus Service Desk 11.2
Computer Associates Unicenter ServicePlus Service Desk 11.1
Computer Associates Unicenter ServicePlus Service Desk 11
Computer Associates Unicenter Service Metric Analysis 3.5
Computer Associates Unicenter Service Metric Analysis 3.0.2
Computer Associates Unicenter Service Metric Analysis 11.1
Computer Associates Unicenter Service Metric Analysis 11
Computer Associates Unicenter Service Intelligence 11
Computer Associates Unicenter Service Delivery 11.0
Computer Associates Unicenter Service Delivery 11.1
Computer Associates Unicenter Service Catalog 11.1
Computer Associates Unicenter Service Catalog 11
Computer Associates Unicenter Service Assure 2.2
Computer Associates Unicenter Service Assure 11.1
Computer Associates Unicenter Service Assure 11
Computer Associates Unicenter Service Accounting 11.1
Computer Associates Unicenter Service Accounting 11
Computer Associates Unicenter Remote Control 6.0 SP1
Computer Associates Unicenter Remote Control 6.0
Computer Associates Unicenter Remote Control 11
Computer Associates Unicenter Patch Management 11
Computer Associates Unicenter Network and Systems Management 3.1
Computer Associates Unicenter Network and Systems Management 3.0
Computer Associates Unicenter Network and Systems Management 3.1
Computer Associates Unicenter Network and Systems Management 3.0
Computer Associates Unicenter Network and Systems Management 11.1
Computer Associates Unicenter Network and Systems Management 11
Computer Associates Unicenter Management Portal 3.1.1
Computer Associates Unicenter Management Portal 3.1
Computer Associates Unicenter Lightweight Portal 2
Computer Associates Unicenter Job Management Option 11.0
Computer Associates Unicenter Enterprise Job Manager 1.0 SP2
Computer Associates Unicenter Enterprise Job Manager 1.0 SP1
Computer Associates Unicenter Enterprise Job Manager 1.0 SP4
Computer Associates Unicenter Enterprise Job Manager 1.0 SP3
Computer Associates Unicenter Enterprise Job Manager 1.0
Computer Associates Unicenter Desktop Management Suite 11
Computer Associates Unicenter Desktop and Server Management 11
Computer Associates Unicenter Database Command Center 11.1
Computer Associates Unicenter CA Web Services Distributed Management 11.0
Computer Associates Unicenter CA Web Services Distributed Management 3.5
Computer Associates Unicenter CA Web Services Distributed Management 3.11
Computer Associates Unicenter CA Web Services Distributed Management 3.1
Computer Associates Unicenter Asset Portfolio Management 11.2.1
Computer Associates Unicenter Asset Portfolio Management 11.0
Computer Associates Unicenter Asset Portfolio Management 11.3
Computer Associates Unicenter Asset Management 11
Computer Associates Unicenter Asset Intelligence 11
Computer Associates Unicenter
Computer Associates eTrust Web Access Control 1.0
Computer Associates eTrust Single Sign-On 7
Computer Associates eTrust Secure Content Manager 8.0
Computer Associates eTrust Secure Content Manager 1.1
Computer Associates eTrust Secure Content Manager 1.0 SP1
Computer Associates eTrust Secure Content Manager 1.0
Computer Associates eTrust Identity Manager 8.1
Computer Associates eTrust IAM Suite 8
Computer Associates eTrust Directory 8.1
Computer Associates eTrust Audit 8 SP2
Computer Associates eTrust Admin 8.1.2 SP2
Computer Associates eTrust Admin 8.1.1 SP2
Computer Associates eTrust Admin 8.1
Computer Associates eTrust Admin 8.0
Computer Associates eTrust Admin 8.1 SP2
Computer Associates eTrust Admin 8.1 SP1
Computer Associates CleverPath Predictive Analysis Server 3.0
Computer Associates CleverPath Aion 10.0
Computer Associates BrightStor ARCServe Backup 11.5.2 SP2
Computer Associates BrightStor ARCServe Backup 11.1
Computer Associates BrightStor ARCServe Backup 9.1
Computer Associates BrightStor ARCServe Backup 9.01
Computer Associates BrightStor ARCServe Backup 11.5.SP3
Computer Associates BrightStor ARCServe Backup 11.5.SP2
Computer Associates BrightStor ARCServe Backup 11.5.SP1
Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates BrightStor ARCServe Backup 11
Computer Associates BrightStor ARCServe Backup 10.5
Computer Associates ARCserve Backup 11.1
Computer Associates AllFusion Harvest Change Manager 7.1
Computer Associates AllFusion Harvest Change Manager 7
Computer Associates AllFusion Enterprise Workbench 7.1
Computer Associates AllFusion Enterprise Workbench 7
Computer Associates AllFusion Enterprise Workbench 1.1 SP1
Computer Associates AllFusion Enterprise Workbench 1.1
Computer Associates Advantage Plex for Distributed Systems 5.5
Computer Associates Advantage Data Transformer 2.2
Not Vulnerable:

Discussion

Ingres Flawed In User Authentication Unauthorized Access Vulnerability

Ingres is prone to an unauthorized-access security vulnerability because of a flaw in user authentication.

Attackers can exploit this issue to gain unauthorized access to the affected database. Successful exploits can allow attackers to access, create, or modify data; other attacks are possible.

This issue affects Ingres 2.5 and 2.6 when running on Windows.

NOTE: This issue does not affect the Ingres .NET data provider.

Exploit / POC

Ingres Flawed In User Authentication Unauthorized Access Vulnerability

No specific exploit code is required to leverage this issue. An attacker connects to an affected server after another user has connected.

Solution / Fix

Ingres Flawed In User Authentication Unauthorized Access Vulnerability

Solution:
The vendor released an advisory and patches to address this issue. Please see the references for more information.


Computer Associates Unicenter Network and Systems Management 3.0

Computer Associates Unicenter Enterprise Job Manager 1.0 SP3

Computer Associates Web Service Distributed Management 3.11

Computer Associates Unicenter Service Metric Analysis 11

Computer Associates eTrust Web Access Control 1.0

Computer Associates Unicenter Network and Systems Management 11

Computer Associates Unicenter ServicePlus Service Desk 11.2

Computer Associates Unicenter ServicePlus Service Desk 6.0 SP1

Computer Associates Unicenter Workload Control Center 1 SP3

Computer Associates Unicenter TNG 2.4.2J

Computer Associates Unicenter ServicePlus Service Desk 5.5 SP3

Computer Associates Unicenter Software Delivery 11

Computer Associates Web Service Distributed Management 3.50

Computer Associates eTrust Audit 8 SP2

Computer Associates Unicenter Network and Systems Management 3.1

Computer Associates Unicenter Asset Intelligence 11

Computer Associates Unicenter Job Management Option 11.0

Computer Associates Unicenter ServicePlus Service Desk 11

Computer Associates BrightStor ARCServe Backup 9.01

Computer Associates eTrust Identity Manager 8.1

Computer Associates Unicenter Asset Management 11

Computer Associates Unicenter Service Catalog 11

Computer Associates Unicenter Service Delivery 11.1

Computer Associates Unicenter Service Intelligence 11

Computer Associates eTrust Single Sign-On 7

Computer Associates Unicenter Service Assure 11.1

Computer Associates eTrust Directory 8.1

Computer Associates Unicenter Desktop Management Suite 11

Computer Associates Unicenter Service Assure 11

Computer Associates Unicenter Service Assure 2.2

Computer Associates Unicenter Enterprise Job Manager 1.0

Computer Associates AllFusion Harvest Change Manager 7.1

Computer Associates Unicenter Lightweight Portal 2

Computer Associates AllFusion Enterprise Workbench 7.1

Computer Associates Unicenter Network and Systems Management 11.1

Computer Associates Etrust Iam Suite 8

Computer Associates Unicenter Enterprise Job Manager 1.0 SP4

Computer Associates Unicenter Service Accounting 11.1

Computer Associates BrightStor ARCServe Backup 11.5.SP2

Computer Associates AllFusion Enterprise Workbench 1.1

Computer Associates AllFusion Enterprise Workbench 1.1 SP1

Computer Associates Unicenter Service Metric Analysis 11.1

Computer Associates eTrust Secure Content Manager 1.0 SP1

Computer Associates Unicenter Enterprise Job Manager 1.0 SP2

Computer Associates eTrust Secure Content Manager 1.0

Computer Associates eTrust Secure Content Manager 1.1

Computer Associates CleverPath Aion 10.0

Computer Associates Unicenter Service Delivery 11.0

Computer Associates Unicenter Asset Portfolio Management 11.0

Computer Associates BrightStor ARCServe Backup 11.1

Computer Associates BrightStor ARCServe Backup 11.5.2 SP2

Computer Associates Unicenter TNG 2.1

Computer Associates Advantage Data Transformer 2.2

Computer Associates Unicenter TNG 2.2

Computer Associates Unicenter TNG 2.4

Computer Associates Unicenter TNG 2.4.2

Computer Associates Unicenter TNG 2.5

Computer Associates Unicenter Network and Systems Management 3.0

Computer Associates CleverPath Predictive Analysis Server 3.0

Computer Associates Unicenter Service Metric Analysis 3.0.2

Computer Associates Unicenter Management Portal 3.1

Computer Associates Unicenter Network and Systems Management 3.1

Computer Associates Unicenter Service Metric Analysis 3.5

Computer Associates Unicenter ServicePlus Service Desk 5.5

Computer Associates Unicenter ServicePlus Service Desk 5.5.1

Computer Associates Unicenter Remote Control 6.0

Computer Associates Unicenter ServicePlus Service Desk 6.0

Computer Associates Unicenter ServicePlus Service Desk 6.0.1

Computer Associates eTrust Secure Content Manager 8.0

Computer Associates BrightStor ARCServe Backup 9.1

References

Ingres Flawed In User Authentication Unauthorized Access Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report