CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: stack-based buffer overflow in the libbecompat library in ingres 2.6, ingres 2006 release 1 (aka 9.0.4), and ingres 2006 release 2 (aka 9.1.0) on linux and hp-ux allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport. "exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the "ingres" user. by itself, this vulnerability does not have very serious consequences. however, when combined with the library loading vulnerability, it allows an attacker to execute arbitrary code with root privileges. " (idefense) "fixes are available for the current release of ingres 2006 release 2 (9.1.0), for ingres 2006 release 1 (9.0.4), and for ingres 2.6 versions on their respective platforms. the security fixes are available and can be quickly applied with little to no anticipated impact to systems.

ingres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes:
http://servicedesk.ingres.com/caisd/pdmweb.ingres?op=show_detail+persid=kd:416012+htmpl=kt_document_view.htmpl

(ingres.com)
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2008-08-05
Last Modified Date: 2018-10-11
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: stack-based buffer overflow in the libbecompat library in ingres 2.6, ingres 2006 release 1 (aka 9.0.4), and ingres 2006 release 2 (aka 9.1.0) on linux and hp-ux allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport. "exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the "ingres" user. by itself, this vulnerability does not have very serious consequences. however, when combined with the library loading vulnerability, it allows an attacker to execute arbitrary code with root privileges. " (idefense) "fixes are available for the current release of ingres 2006 release 2 (9.1.0), for ingres 2006 release 1 (9.0.4), and for ingres 2.6 versions on their respective platforms. the security fixes are available and can be quickly applied with little to no anticipated impact to systems.

ingres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes:
http://servicedesk.ingres.com/caisd/pdmweb.ingres?op=show_detail+persid=kd:416012+htmpl=kt_document_view.htmpl

(ingres.com)
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2008-08-05
Last Modified Date: 2018-10-11
assistant