Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Ingres Database Multiple Local Vulnerabilities

High

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running the Ingres Database.

This version of Ingres is vulnerable to several local vulnerabilities. There is a flaw in the 'verifydb' utility that would allow a local attacker to overwrite critical files. There is a flaw in the 'libbecompat' library that would allow a local attacker to execute a stack overflow. There is a flaw in the 'ingvalidpw' utility that would allow a local user to escalate privileges.

Solution

Upgrade or patch according to vendor recommendations.