Intrusion PreventionIngres.Database.uuid_from_char.Stack.Buffer.Overflow
Description
This indicates a possible exploit of a buffer-overflow vulnerability in Ingres database server.
The vulnerability is caused by an error when the vulnerable software handles an overly long argument passed to the "uuid_from_char()" function. It allows a remote attacker to execute arbitrary code.
Affected Products
Ingres Corporation Ingres Database 2006 0
Ingres Corporation Ingres Database 3.0.3
Ingres Corporation Ingres Database 2.6
Ingres Corporation Ingres Database 2.5
Computer Associates Wily SOA Manager 7.1
Computer Associates Unicenter Workload Control Center 1.0.SP4
Computer Associates Unicenter Workload Control Center 1.0 SP4
Computer Associates Unicenter TNG 2.4.2
Computer Associates Unicenter TNG 2.2
Computer Associates Unicenter TNG 2.4.2J
Computer Associates Unicenter Software Delivery 11
Computer Associates Unicenter ServicePlus Service Desk 6.0
Computer Associates Unicenter ServicePlus Service Desk 6.0 SP1
Computer Associates Unicenter ServicePlus Service Desk 5.5 SP3
Computer Associates Unicenter ServicePlus Service Desk 11.2
Computer Associates Unicenter ServicePlus Service Desk 11.1
Computer Associates Unicenter ServicePlus Service Desk 11
Computer Associates Unicenter Service Metric Analysis 3.5
Computer Associates Unicenter Service Metric Analysis 3.0.2
Computer Associates Unicenter Service Metric Analysis 11.1
Computer Associates Unicenter Service Metric Analysis 11
Computer Associates Unicenter Service Intelligence 11
Computer Associates Unicenter Service Delivery 11.0
Computer Associates Unicenter Service Delivery 11.1
Computer Associates Unicenter Service Catalog 11
Computer Associates Unicenter Service Assure 2.2
Computer Associates Unicenter Service Assure 11.1
Computer Associates Unicenter Service Assure 11
Computer Associates Unicenter Remote Control 6.0
Computer Associates Unicenter Remote Control 11
Computer Associates Unicenter Patch Management 11
Computer Associates Unicenter Network and Systems Management 3.1
Computer Associates Unicenter Network and Systems Management 3.0
Computer Associates Unicenter Network and Systems Management 11
Computer Associates Unicenter Management Portal 3.1.1
Computer Associates Unicenter Lightweight Portal 2
Computer Associates Unicenter Job Management Option 11.0
Computer Associates Unicenter Enterprise Job Manager 1.0 SP4
Computer Associates Unicenter Enterprise Job Manager 1.0 SP3
Computer Associates Unicenter Desktop Management Suite 11
Computer Associates Unicenter Desktop and Server Management 11
Computer Associates Unicenter Database Command Center 11.1
Computer Associates Unicenter CA Web Services Distributed Management 3.5
Computer Associates Unicenter CA Web Services Distributed Management 3.11
Computer Associates Unicenter Asset Portfolio Management 11.2.1
Computer Associates Unicenter Asset Portfolio Management 11.0
Computer Associates Unicenter Asset Portfolio Management 11.3
Computer Associates Unicenter Asset Management 11
Computer Associates Unicenter Asset Intelligence 11
Computer Associates Unicenter Advanced Systems Management 11
Computer Associates eTrust Web Access Control 1.0
Computer Associates eTrust Single Sign-On 8.1
Computer Associates eTrust Single Sign-On 8
Computer Associates eTrust Single Sign-On 7
Computer Associates eTrust Secure Content Manager 8.0
Computer Associates eTrust Network Forensics 8.1
Computer Associates eTrust Identity Manager 8.1
Computer Associates eTrust IAM Toolkit 8.1
Computer Associates eTrust IAM Toolkit 8
Computer Associates eTrust IAM Suite 8
Computer Associates eTrust Directory 8.1
Computer Associates eTrust Audit r8
Computer Associates eTrust Admin 8.1
Computer Associates eTrust Admin 8.0
Computer Associates eTrust Admin 8.1 SP2
Computer Associates eTrust Admin 8.1 SP1
Computer Associates DocServer 1.1
Computer Associates CleverPath Predictive Analysis Server 3.0
Computer Associates CleverPath Aion BRE 10.1
Computer Associates CleverPath Aion BPM 10.1
Computer Associates CCS 11
Computer Associates BrightStor Storage Resource Manager 11.5
Computer Associates BrightStor Storage Command Center 11.5
Computer Associates BrightStor Enterprise Backup for Tru64 10.5
Computer Associates BrightStor Enterprise Backup for Solaris 10.5
Computer Associates BrightStor Enterprise Backup for HP 10.5
Computer Associates BrightStor Enterprise Backup for AIX 10.5
Computer Associates BrightStor ARCServe Backup for Linux 11.1
Computer Associates BrightStor ARCServe Backup for Linux 9.0
Computer Associates BrightStor ARCserve Backup for Laptops and Desktop 11.5
Computer Associates BrightStor ARCServe Backup 11.1
Computer Associates BrightStor ARCServe Backup 11.5
Computer Associates AllFusion Harvest Change Manager 7.1
Computer Associates AllFusion Harvest Change Manager 7
Computer Associates AllFusion Enterprise Workbench 7.1
Computer Associates AllFusion Enterprise Workbench 7
Computer Associates AllFusion Enterprise Workbench 1.1.SP1
Computer Associates AllFusion Enterprise Workbench 1.1
Computer Associates Advantage Data Transformer 2.2
Impact
System Compromise
Recommended Actions
Apply the appropriate patch:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14816 |
| Created | Jul 26, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-3338 |
| Exploit Prediction Score | 53.03% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | CA, Other |