Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote malicious users to execute arbitrary code via (1) a long attach request on TCP port 3050 to the isc_attach_database function or (2) a long create request on TCP port 3050 to the isc_create_database function.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
firebirdsql firebird 2.0.1.12855 |
||
firebirdsql firebird 2.0.0.12748 |