[SECURITY] [DSA 2648-1] firebird2.5 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2648-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2648-1] firebird2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2648-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2013 http://www.debian.org/security/faq -...

CVE-2012-5529

The CVE-2012-5529 entry concerns Firebird, specifically the TraceManager feature in Firebird 2.5.0 and 2.5.1. When tracing is enabled, remote authenticated users can trigger a denial of service by preparing an empty dynamic SQL query, which leads to a NULL pointer dereference and a crash. Publicl...