6.8
CVSSv2

CVE-2013-2492

Published: 15/03/2013 Updated: 07/12/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in Firebird 2.1.3 up to and including 2.1.5 prior to 18514, and 2.5.1 up to and including 2.5.3 prior to 26623, on Windows allows remote malicious users to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

firebirdsql firebird 2.1.3

firebirdsql firebird 2.1.4

firebirdsql firebird 2.1.5

firebirdsql firebird 2.5.1

firebirdsql firebird 2.5.2

firebirdsql firebird 2.5.3

Vendor Advisories

Debian Bug report logs - #693210 server crash on prearing an empty query with tracing enabled Package: src:firebird25; Maintainer for src:firebird25 is Debian Firebird Group <pkg-firebird-general@listsaliothdebianorg>; Reported by: Damyan Ivanov <dmn@debianorg> Date: Wed, 14 Nov 2012 09:39:01 UTC Severity: impo ...
Debian Bug report logs - #702735 firebird21: CVE-2013-2492: Request Processing Buffer Overflow Vulnerability Package: src:firebird21; Maintainer for src:firebird21 is (unknown); Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 10 Mar 2013 21:15:01 UTC Severity: grave Tags: patch, security Fixed in versi ...
A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code For the stable distribution (squeeze), this problem has been fixed in version 21318185-0ds1-11+squeeze1 For the testing distribution (wheezy), firebird21 will be removed in favour of firebird25 For the unstable distributi ...
A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code In addition, a denial of service vulnerability was discovered in the TraceManager For the stable distribution (squeeze), these problems have been fixed in version 25026054~ReleaseCandidate3ds2-1+squeeze1 For the testing dis ...

Exploits

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Tcp def initialize super( 'Name' => 'Firebird Relational Datab ...