Firebird Relational Database isc_attach_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. Module Options msf use exploit/windows/misc/fb/iscattachdatabase msf undefinediscattachdatabase show actions ...actions... msf undefinediscattachdatabase set ACTION msf...

Firebird Relational Database isc_create_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. Module Options msf use exploit/windows/misc/fb/isccreatedatabase msf undefinedisccreatedatabase show actions ...actions... msf undefinedisccreatedatabase set ACTION msf...

Firebird Relational Database SVC_attach() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted service attach request. Module Options msf use exploit/windows/misc/fb/svcattach msf undefinedsvcattach show actions ...actions... msf undefinedsvcattach set ACTION msf undefinedsvcattach show options...

firebird -- multiple remote buffer overflow vulnerabilities

RISE Security reports: There exists multiple vulnerabilities within functions of Firebird Relational Database, which when properly exploited can lead to remote compromise of the vulnerable system...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4668

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4666

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

Design/Logic Flaw

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

Code injection

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

Code injection

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-4665

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

CVE-2007-4666

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4668

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4669

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

Code injection

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...