CVE-2007-3337: Ingres Database Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file.

Affected products

• Ingres Database Server: version 2.5 only; version 2.6 only; version 9.0.4 only; version r3 only

Published 2007-06-22. Last modified 2026-06-16.