CVE-2008-3357

高危 7.2CVE-2008-3357 · Published 05/08/2008 · updated 16/06/2026

要点

CVE-2008-3357 是影响 ingres (actian) 的高危 (CVSS 7.2)漏洞。
未来 30 天内被利用的概率（EPSS）：0.41%，高于 35.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
ingres actian	`= 2.6= 9.0.4= 9.1.0`	No fix yet

Description

Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
secunia.com/advisories/31357 · Third Party Advisory
secunia.com/advisories/31398 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
ingres.com/support/security-alert-080108.php · Vendor Advisory
securityfocus.com/archive/1/495177/100/0/threaded · Third Party Advisory
securityfocus.com/bid/30512 · Third Party Advisory
vupen.com/english/advisories/2008/2292 · Third Party Advisory
vupen.com/english/advisories/2008/2313 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/44181 · Third Party Advisory
support.ca.com/irj/portal/anonymous/phpsupcontent · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free