KLA10158 DoS vulnerability in FireBird

2009-07-2900:00:00

Kaspersky Lab

threats.kaspersky.com

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.541 Medium

EPSS

Percentile

97.6%

JSON

An unspecified vulnerability was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed message.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

Firebird

CVE list

CVE-2009-2620 critical

Solution

Update to latest version

FireBird SQL

Impacts

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

FireBird SQL 1.5 versions 1.5.5 and earlierFireBird SQL 2.0 versions 2.0.5 and earlierFireBird SQL 2.1 versions 2.1.2 and earlierFireBird SQL 2.5 versions beta 1 and earlier