Firebird SQL op_connect_request main listener shutdown vulnerability

1. Advisory Information Title: Firebird SQL opconnectrequest main listener shutdown vulnerability Advisory ID: CORE-2009-0707 Advisory URL:http://www.coresecurity.com/core-labs/advisories/firebird-sql-dos Date published: 2009-07-28 Date of last update: 2009-07-28 Vendors contacted: Firebird SQL...

Gentoo Security Advisory GLSA 200707-01 (firebird)

The remote host is missing updates announced in advisory GLSA 200707-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-02 (firebird)

The remote host is missing updates announced in advisory GLSA 200803-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-18 (firebird)

The remote host is missing updates announced in advisory GLSA 200405-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200707-01 (firebird)

The remote host is missing updates announced in advisory GLSA 200707-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-06 (firebird)

The remote host is missing updates announced in advisory GLSA 200805-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200712-06 (firebird)

The remote host is missing updates announced in advisory GLSA 200712-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200805-06 (firebird)

The remote host is missing updates announced in advisory GLSA 200805-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200712-06 (firebird)

The remote host is missing updates announced in advisory GLSA 200712-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-18 (firebird)

The remote host is missing updates announced in advisory GLSA 200405-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firebird / InterBase Database Server Service Detection (TCP)

TCP based detection of a Firebird / InterBase Database service. SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele SPDX-FileCopyrightText: Improved / extended code / detection routine since 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

FreeBSD Ports: firebird-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 91ed69f9-72c7-11dc-981a-001921ab2fa4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: firebird-server

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Firebird拒绝服务和信息泄漏漏洞

BUGTRAQ ID: 30229 CNCAN ID：CNCAN-2008071607 Firebird是一款流行的数据库程序。 Firebird存在多个安全问题，远程攻击者可以利用漏洞使应用程序崩溃，内存破坏及获得敏感信息。 -部分标准调用会显示服务器安装目录给普通用户。 -新建立数据时使用不正确的访问权限，可导致普通用户可访问。 -EXECUTE STATEMENT存在两个内存破坏问题，可导致服务程序崩溃，其中一个问题存在于64-bit系统平台中。 -如果表达式用于输入参数所需空间的默认值，在请求不纯的区间，可导致覆盖其他内存。 Firebird Firebird 2.1...

Firebird ISC_PASSWORD环境变量非授权访问漏洞

BUGTRAQ ID: 29123 CVECAN ID: CVE-2008-1880 Firebird是一款提供多个ANSI SQL-92功能的关系型数据库，可运行在Linux、Windows和各种Unix平台下 Gentoo的init脚本（/etc/conf.d/firebird）在启动Firebird时默认会设置ISCPASSWORD环境变量，当以SYSDBA用户身份连接的客户端没有提供口令时会使用这个变量，这允许远程攻击者无需提供凭据便认证为SYSDBA用户，访问除用户和口令数据库之外的整个数据库。 Firebird 2.0.3.12981.0 Gentoo ------...

Firebird on Gentoo Linux /etc/conf.d/firebird Invocation ISC_PASSWORD Authentication Bypass

The version of Firebird on the remote host sets the 'ISCPASSWORD' environment variable before starting the database server and uses that for remote client connections when a password is not supplied. An attacker can leverage this issue to connect as 'SYSDBA' with an empty password and gain access...

Firebird Default Credentials

The version of Firebird on the remote host uses default credentials to control access. Knowing these, an attacker can gain administrative access to the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

Default configuration

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...