CVE-2007-6334: Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the pri...

Security readout for executives and security teams

CVE-2007-6334 is an authentication and identity flaw in Ingres 2.5 and 2.6 on Windows. Sources say affected systems may assign later users the same identity and privileges as the first user, allowing remote privilege gain. Risk is highest for legacy Windows servers running Ingres directly or through CA products that embedded it. Exposure is most likely in old Windows environments where Ingres 2.5 or 2.6 remains installed, especially bundled inside legacy CA products. Internet or broad internal network reachability would raise urgency. The provided sources do not identify modern affected versions or all embedded-product consumers. Prioritize discovery in legacy Windows and CA product estates. Treat confirmed exposed systems as high priority because the impact is privilege gain, but avoid emergency claims without evidence of active exploitation or confirmed external exposure. Mitigation focus: Inventory Windows hosts for Ingres 2.5 and 2.6 installations.; Identify CA products that embedded Ingres in the affected period.; Check Ingres and CA vendor advisories for supported fixes or upgrade paths..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.