CVE-2008-3357

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733Broken Link
http://secunia.com/advisories/31357Third Party Advisory
http://secunia.com/advisories/31398Third Party Advisory
http://securitytracker.com/id?1020614Third Party Advisory, VDB Entry
http://www.ingres.com/support/security-alert-080108.phpVendor Advisory
http://www.securityfocus.com/archive/1/495177/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30512Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2292Third Party Advisory
http://www.vupen.com/english/advisories/2008/2313Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44181Third Party Advisory, VDB Entry
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=733Broken Link
http://secunia.com/advisories/31357Third Party Advisory
http://secunia.com/advisories/31398Third Party Advisory
http://securitytracker.com/id?1020614Third Party Advisory, VDB Entry
http://www.ingres.com/support/security-alert-080108.phpVendor Advisory
http://www.securityfocus.com/archive/1/495177/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30512Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2008/2292Third Party Advisory
http://www.vupen.com/english/advisories/2008/2313Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44181Third Party Advisory, VDB Entry
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989Broken Link

Timeline

Published: Aug 5, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-33584.3Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) in the SAP NetWeaver portal, when Internet Explorer 7.0.5730 is used, allows rem CVE-2008-33597.5SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote a CVE-2008-33609.3Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in th CVE-2008-33617.5Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header.CVE-2008-336210.0Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attacke CVE-2008-33637.5Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and CVE-2008-33649.3Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition (OS CVE-2008-33656.8Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to i CVE-2008-33667.5SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parame CVE-2008-33674.3Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attac CVE-2008-33686.5PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrat CVE-2008-33697.5SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via