Ingres Database Server wakeup binary symlink
| ingres-wakeup-symlink (35002) |  Medium Risk |
Description:
Ingres Database Server, which is included in multiple CA (Computer Associates) products, could allow a local attacker to launch a symlink attack. The wakeup binary creates temporary files insecurely. A local attacker could exploit this vulnerability to create or overwrite arbitrary files on the system with the privileges of the "ingres" user.
Platforms Affected:
- Ingres, Ingres Database 2.5
- Ingres, Ingres Database 2.6
- Ingres, Ingres Database r3
- Ingres, Ingres Database 2006 9.0.4
Remedy:
Refer to CA SupportConnect Web site for patch or upgrade information. See References.
Consequences:
File Manipulation
References:
- BugTraq Mailing List, Mon Jun 25 2007 - 04:41:10 CDT, Ingres wakeup setuid(ingres) file truncation at http://archives.neohapsis.com/archives/bugtraq/2007-06/0305.html.
- CA SupportConnect Web site, Ingres Security Alert at http://supportconnectw.ca.com/public/ca_common_docs/ingresvuln_letter.asp.
- Ingres Corporation Web site, Ingres Database Server at http://www.ingres.com/index.php.
- BID-24585: Ingress Database Server Multiple Remote Vulnerabilities
- CVE-2007-3337: wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.
- FrSIRT/ADV-2007-2288: Ingres Products Multiple Command Execution and Denial of Service Vulnerabilities
- FrSIRT/ADV-2007-2290: CA Multiple Products Ingres Database Remote and Local Code Execution Vulnerabilities
- SA25756: Ingres Database Multiple Vulnerabilities
- SA25775: CA Products Ingres Database Vulnerabilities
Reported:
Jun 21, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net