Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ingress数据库服务器 Communications Server 和Data Access Server组件远程堆溢出漏洞
Vulnerability Description
Ingres是很多CA产品默认所使用的数据库后端。 CA产品所捆绑Ingres数据库服务器在处理请求数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 Ingres通讯服务器进程(iigcc)默认监听在TCP 21064端口上。如果创建了到这个端口的连接并在很短时间内发送了两次特制表单的话，iigcc就会用攻击者可控的参数调用QUremove函数，然后QUremove覆盖可控的地址，这就允许攻击者完全控制执行流；如果向这个端口反复发送特制表单且报文之间有些停顿的话，iigcc就会调用QUins
CVSS Information
N/A
Vulnerability Type
N/A