Lucene search

K
kasperskyKaspersky LabKLA10159
HistoryMar 15, 2013 - 12:00 a.m.

KLA10159 ACE vulnerbility in FireBird

2013-03-1500:00:00
Kaspersky Lab
threats.kaspersky.com
168

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.761 High

EPSS

Percentile

98.2%

A buffer overflow was found in FireBird. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet.

Original advisories

Related products

Firebird

CVE list

CVE-2013-2492 high

Solution

Update to latest version

FireBird SQL

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • FireBird SQL from 2.1.3 to 2.1.5FireBird SQL from 2.5.1 to 2.5.3

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.761 High

EPSS

Percentile

98.2%