Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CA Ingres verifydb 本地权限提升漏洞
Vulnerability Description
Ingres是很多CA产品默认所使用的数据库后端。Ingres数据库中所捆绑的ingvalidpw工具用于验证用户凭据。 Ingres多个版本(Ingres 2.6, Ingres 2006 release1及release2 )中的ingvalidpw程序由于不可信的搜索路径而导致本地权限提升漏洞。在加载共享库时，ingvalidpw程序会加载用户目录中的库，本地用户可以通过特制的库获取特权。
CVSS Information
N/A
Vulnerability Type
N/A