CVE-2008-3389

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and…

published August 5, 2008

CVSS
—
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.3th percentile
Published
2008-08-05T19:20Z
EPSS history
Timeline
  • 05 AUG 19:20Z
    Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and…
    cvelistv5