| Package | Affected versions | Patched versions |
|---|---|---|
| ingres | = 2.6= 2006 |
Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free