Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
firebirdsql vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-4664
Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird prior to 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.
Firebirdsql Firebird
NA
CVE-2007-4665
Unspecified vulnerability in the server in Firebird prior to 2.0.2 allows remote malicious users to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.
Firebirdsql Firebird
NA
CVE-2007-4666
Unspecified vulnerability in the server in Firebird prior to 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote malicious users to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.
Firebirdsql Firebird
NA
CVE-2007-4668
Unspecified vulnerability in the server in Firebird prior to 2.0.2 allows remote malicious users to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
Firebirdsql Firebird
NA
CVE-2007-4669
The Services API in Firebird prior to 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
Firebirdsql Firebird
NA
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions prior to 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_dr...
Firebirdsql Firebird 1.0.2
3 EDB exploits
NA
CVE-2006-7211
fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.
Firebirdsql Firebird 1.5
NA
CVE-2006-7213
Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.
Firebirdsql Firebird 1.5
NA
CVE-2006-7214
Multiple unspecified vulnerabilities in Firebird 1.5 allow remote malicious users to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of service (connection drop) via certain network traffic, as demonstrated by Nes...
Firebirdsql Firebird 1.5
NA
CVE-2006-1241
Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities.
Firebirdsql Firebird 1.5.2.4731
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »