CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: untrusted search path vulnerability in ingvalidpw in ingres 2.6, ingres 2006 release 1 (aka 9.0.4), and ingres 2006 release 2 (aka 9.1.0) on linux and hp-ux allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability." fixes are available for the current release of ingres 2006 release 2 (9.1.0), for ingres 2006 release 1 (9.0.4), and for ingres 2.6 versions on their respective platforms. the security fixes are available and can be quickly applied with little to no anticipated impact to systems. 

ingres customers with a current support contract can review the following knowledge base document for information on downloading the available fixes: 
http://servicedesk.ingres.com/caisd/pdmweb.ingres?op=show_detail+persid=kd:416012+htmpl=kt_document_view.htmpl 

(ingres.com)
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-08-05
Last Modified Date: 2018-10-11