firebirdsql firebird 1.5 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

Integer overflow in Firebird SQL 1.0.3 and previous versions, 1.5.x prior to 1.5.6, 2.0.x prior to 2.0.4, and 2.1.x prior to 2.1.0 RC1 might allow remote malicious users to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5)...

Firebirdsql Firebird Firebirdsql Firebird 2.1.0

1 EDB exploit

7.8

CVSSv2

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote malicious users to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of service (connection drop) via certain network traffic, as demonstrated by Nes...

Firebirdsql Firebird 1.5

6.8

CVSSv2

Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240.

Firebirdsql Firebird 1.5

5.5

CVSSv2

Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.

Firebirdsql Firebird 1.5

5

CVSSv2

src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 prior to 1.5.6, 2.0 prior to 2.0.6, 2.1 prior to 2.1.3, and 2.5 prior to 2.5 Beta 2 allows remote malicious users to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infi...

Firebirdsql Firebird 1.5.2 Firebirdsql Firebird 1.5.2.4731 Firebirdsql Firebird Firebirdsql Firebird 2.0.1 Firebirdsql Firebird 1.5 Firebirdsql Firebird 1.5.1 Firebirdsql Firebird 2.0.0.12748 Firebirdsql Firebird 2.0.2 Firebirdsql Firebird 1.5.3.4870 Firebirdsql Firebird 1.5.4.4910 Firebirdsql Firebird 2.1 Firebirdsql Firebird 2.1.2 Firebirdsql Firebird 2.1.3 Firebirdsql Firebird 1.5.5 Firebirdsql Firebird 2.0.0 Firebirdsql Firebird 2.5

1 EDB exploit

5

CVSSv2

Buffer overflow in ibserver for Firebird Database 1.0 and other versions prior to 1.5, and possibly other products that use the InterBase codebase, allows remote malicious users to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.

Borland Software Interbase 5.0 Borland Software Interbase 6.0 Borland Software Interbase 4.0 Borland Software Interbase Superserver 6.0 Firebirdsql Firebird 1.0 Borland Software Interbase 6.4 Borland Software Interbase 6.5 Borland Software Interbase 7.0 Borland Software Interbase 7.1

2 EDB exploits

4.9

CVSSv2

fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.

Firebirdsql Firebird 1.5

4.6

CVSSv2

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.

Firebirdsql Firebird 1.5.2 Firebirdsql Firebird 1.5 Firebirdsql Firebird 1.5.1

1 EDB exploit

4.6

CVSSv2

Buffer overflow in Firebird 1.0.2 and other versions prior to 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_dr...

Firebirdsql Firebird 1.0.2

3 EDB exploits

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook