49 matches found
USN-4822-1: Firebird vulnerability
It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code...
CVE-2016-1569
FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...
Default configuration
The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...
GLSA-200707-01 : Firebird: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200707-01 Firebird: Buffer overflow Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing 'connect' requests with an overly large 'pcnctcount' value. Impact : An unauthenticated remote attacker coul...
Firebird 1.0 - Remote Database Name Buffer Overrun
source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A remote attacker may exploit this...
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...
Firebird 1.0 - GDS_Inet_Server Interbase Environment Variable Buffer Overflow
Firebird 1.0 - GDSInetServer Interbase Environment Variable Buffer Overflow // source: https://www.securityfocus.com/bid/7546/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. As Firebird is based on Borland/Inprise Interbase...
Firebird Local exploit
-Dtors Security Research- - www.dtors.net - -Package: Firebird1.0.2 FreeBSD -Versions Affected: 1.0.2 -Website: http://firebird.sf.net -Exploit: Local Stack Overflow -Date: 22/03/2003 -Author: [email protected] && [email protected] ---BACKGROUND Firebird is a relational database offering many ANSI...
Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1)
source: https://www.securityfocus.com/bid/5044/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. A buffer overflow has been discovered in the gdsdrop program packaged with Interbase. This problem could allow a local user to...