CVE-2004-2043

CVE-2004-2043 affects Firebird/InterBase-based systems, with a buffer overflow in the ibserver that can be triggered remotely by a long database name via the gsec command, causing a crash (DoS). Affected: Firebird 1.0 and other versions before 1.5 (Firebird2/InterBase-derived releases noted in De...

Firebird Database Detection

Binary data 2000.prm...

Firebird Database < 2.1.1.17910 Multiple Vulnerabilities

Binary data 4584.prm...

Firebird Database Client Detection

Binary data 5181.prm...

[Full-Disclosure] Firebird [ AND Interbase 7 ] Database Remote Database Name Overflow

Someone that has had some success communicating things security wise to Borland may wish to contact them about this. root@CloneRiot bin rpm -ivh /root/InterBaseSSLI-V7.1.0-1.i386.rpm kf@CloneRiot bin$ pwd /opt/interbase/bin kf@CloneRiot bin$ ./gsec -database 127.0.0.1:perl -e'print "A"x300' gdb c...

Firebird Database Remote Database Name Overflow

Firebird Database Remote Database Name Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/unixfocus/5AP0P0UCUO.html SUMMARY http://firebird.sourceforge.net Firebird is "a relational database offering many ANSI SQL-92...

Firebird 1.0 - Remote Database Name Buffer Overrun

Firebird 1.0 - Remote Database Name Buffer Overrun source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling...

Firebird DB Remote Database Name Overflow

The remote host is running Firebird database. The remote version of this service is vulnerable to a remote stack-based overflow. An attacker, exploiting this hole, would be given full access to the target machine. Versions of Firebird database less than 1.5.0 are reportedly vulnerable to this...

[UNIX] Firebird Database Remote Database Name Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2004-2043

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...

CVE-2004-2043

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...