CVE-2007-6334 json
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to…
published 2007-12-20 18 y ago modified 2026-06-16 4 mo ago also EUVD-2007-6301
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known
Summary
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
Patch / fix
- securityfocus.com/bid/26959 patch
- secunia.com/advisories/28187 advisory
- secunia.com/advisories/28183 advisory
Exploit prediction
1.81% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
secunia.com
/advisories/28187
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/bid/26959
vdb-entry, patch
-
secunia.com
/advisories/28183
third-party-advisory, patch, vendor-advisory
-
vupen.com
/english/advisories/2007/4303
vdb-entry
-
securitytracker.com
/id?1019134
vdb-entry
-
osvdb.org
/39358
vdb-entry
- ingres.com /support/security-alertDec17.php
- supportconnectw.ca.com /public/ingres/infodocs/ingresmswin-secnot.asp
-
vupen.com
/english/advisories/2007/4304
vdb-entry
-
securityfocus.com
/archive/1/485448/100/0/threaded
mailing-list
Sources
- CVE List CVE-2007-6334
- NVD CVE-2007-6334
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.