Multiple vulnerabilities have been identified in Ingres, which could be exploited by local attackers to gain elevated privileges.
The first issue is caused due to the "verifydb" utility having the set-uid bit set (owned by the "ingres" user) and improperly changing the permissions on files, which could allow an attacker to overwrite arbitrary files owned by the "ingres" user.
The second vulnerability is caused by a buffer overflow error in the "libbecompat" library when processing an overly long environment variable, which could allow an attacker to execute arbitrary code with the privileges of the "ingres" user.
The third issue is caused by an error in the set-uid root "ingvalidpw" utility that loads libraries from a directory owned by the "ingres" user in an insecure manner, which could be exploited to gain "root" privileges.
