CVE-2008-3356

{"id": "CVE-2008-3356", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2008-08-05T19:41:00.000", "references": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=731", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31357", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31398", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1020613", "source": "cve@mitre.org"}, {"url": "http://www.ingres.com/support/security-alert-080108.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/495177/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/30512", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2292", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/2313", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44177", "source": "cve@mitre.org"}, {"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=181989", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename."}, {"lang": "es", "value": "verifydb en Ingres 2.6, Ingres 2006 versi\u00f3n 1 (alias 9.0.4), y Ingres 2006 versi\u00f3n 2 (alias 9.1.0) en Linux y otras plataformas Unix que establece la propiedad o permisos del archivo iivdb.log, sin verificar que es el archivo log propio de la aplicaci\u00f3n, lo que permite a los usuarios sobrescribir arbitrariamente archivos creando un enlace simb\u00f3lico con un nombre de archivo iivdb.log."}], "lastModified": "2018-10-11T20:48:02.660", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ingres:ingres:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCE11A92-56B9-43A2-9E3D-D511AE713F45"}, {"criteria": "cpe:2.3:a:ingres:ingres:2006:9.0.1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CEFDCDD-7D4B-442C-8CD4-D22CA5F4DD35"}, {"criteria": "cpe:2.3:a:ingres:ingres:2006:9.0.4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D988634E-4C81-457B-AA97-9C55575E9DB6"}, {"criteria": "cpe:2.3:a:ingres:ingres:2006:release_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A99FF96C-A88B-4AE2-BA8B-C16D2F88C606"}, {"criteria": "cpe:2.3:a:ingres:ingres:2006:release_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02D8FAC9-5887-4B0D-BB95-0704D763B6A8"}], "operator": "OR"}]}], "evaluatorImpact": "\"Exploitation of this vulnerability allows an attacker to overwrite arbitrary files owned by the \"ingres\" user. By itself, this vulnerability does not have very serious consequences. However, when combined with the library loading vulnerability, it allows an attacker to execute arbitrary code with root privileges. \" (iDefense)\r\n\r\n", "evaluatorComment": "This vulnerability affects all platforms except VMS and Windows", "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Fixes are available for the current release of Ingres 2006 release 2 (9.1.0), for Ingres 2006 release 1 (9.0.4), and for Ingres 2.6 versions on their respective platforms. The security fixes are available and can be quickly applied with little to no anticipated impact to systems. \r\n\r\nIngres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes:\r\nhttp://servicedesk.ingres.com/CAisd/pdmweb.ingres?OP=SHOW_DETAIL+PERSID=KD:416012+HTMPL=kt_document_view.htmpl\r\n\r\n(ingres.com)"}