CVE-2007-3338

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as...

10.0 High

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allow remote attackers to execute arbitrary code via the (1) uuid_from_char or (2) duve_get_args functions.

Exploit likelihood

6.67%Down 5.6 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2007-3338
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-3338
Updated: 2026-11-02

EUVDEUVD-2007-3328 No score

Record: EUVD-2007-3328
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hg2r-f4fp-pm95 No score

Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as...

Record: GHSA-hg2r-f4fp-pm95
Weakness: CWE-119
Updated: 2026-11-02

Affected products

ingres database server

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, references, title	GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3338 is a high vulnerability (CVSS 10.0) in Ingres Database Server, published June 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.67%, the 93rd percentile. No source names a fixed version.

References

Show 10 moreShow less