FreeBSD Ports: firebird-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 91ed69f9-72c7-11dc-981a-001921ab2fa4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Firebird拒绝服务和信息泄漏漏洞

BUGTRAQ ID: 30229 CNCAN ID：CNCAN-2008071607 Firebird是一款流行的数据库程序。 Firebird存在多个安全问题，远程攻击者可以利用漏洞使应用程序崩溃，内存破坏及获得敏感信息。 -部分标准调用会显示服务器安装目录给普通用户。 -新建立数据时使用不正确的访问权限，可导致普通用户可访问。 -EXECUTE STATEMENT存在两个内存破坏问题，可导致服务程序崩溃，其中一个问题存在于64-bit系统平台中。 -如果表达式用于输入参数所需空间的默认值，在请求不纯的区间，可导致覆盖其他内存。 Firebird Firebird 2.1...

Firebird ISC_PASSWORD环境变量非授权访问漏洞

BUGTRAQ ID: 29123 CVECAN ID: CVE-2008-1880 Firebird是一款提供多个ANSI SQL-92功能的关系型数据库，可运行在Linux、Windows和各种Unix平台下 Gentoo的init脚本（/etc/conf.d/firebird）在启动Firebird时默认会设置ISCPASSWORD环境变量，当以SYSDBA用户身份连接的客户端没有提供口令时会使用这个变量，这允许远程攻击者无需提供凭据便认证为SYSDBA用户，访问除用户和口令数据库之外的整个数据库。 Firebird 2.0.3.12981.0 Gentoo ------...

Firebird Default Credentials

The version of Firebird on the remote host uses default credentials to control access. Knowing these, an attacker can gain administrative access to the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Firebird on Gentoo Linux /etc/conf.d/firebird Invocation ISC_PASSWORD Authentication Bypass

The version of Firebird on the remote host sets the 'ISCPASSWORD' environment variable before starting the database server and uses that for remote client connections when a password is not supplied. An attacker can leverage this issue to connect as 'SYSDBA' with an empty password and gain access...

Default configuration

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

CVE-2008-1880

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password...

CVE-2008-1880

The CVE-2008-1880 entry concerns Firebird on Gentoo Linux. The default Gentoo init script sets the ISC_PASSWORD environment variable when starting Firebird, which is used for remote SYSDBA connections if no password is supplied. This allows remote attackers to bypass SYSDBA authentication and obt...

GLSA-200805-06 : Firebird: Data disclosure

The remote host is affected by the vulnerability described in GLSA-200805-06 Firebird: Data disclosure Viesturs reported that the default configuration for Gentoo's init script '/etc/conf.d/firebird' sets the 'ISCPASSWORD' environment variable when starting Firebird. It will be used when no...

Firebird: Data disclosure

Background Firebird is a multi-platform, open source relational database. Description Viesturs reported that the default configuration for Gentoo's init script "/etc/conf.d/firebird" sets the "ISCPASSWORD" environment variable when starting Firebird. It will be used when no password is supplied b...

Firebird关系数据库'protocol.cpp' XDR协议远程内存破坏漏洞

BUGTRAQ ID: 28403 CVE ID:CVE-2008-0387 CNCVE ID:CNCVE-20080387 Firebird Relational Database是一款关系型数据库。 Firebird Relational Database管理器处理XDR协议上部分标签时存在整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当src/remote/protocol.cpp解析器接收到如下非法数据的操作时： opreceive opstart opstartandreceive opsend opstartandsend...

Debian DSA-1529-1 : firebird -- multiple vulnerabilities

Multiple security problems have been discovered in the Firebird database, which may lead to the execution of arbitrary code or denial of service. This Debian security advisory is a bit unusual. While it's normally our strict policy to backport security bugfixes to older releases, this turned out...

[SECURITY] [DSA 1529-1] New Firebird packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1529-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 24, 2008 http://www.debian.org/security/faq -...

DSA-1529-1 firebird - multiple vulnerabilities

Multiple security problems have been discovered in the Firebird database, which may lead to the execution of arbitrary code or denial of service. This Debian security advisory is a bit unusual. While it's normally our strict policy to backport security bugfixes to older releases, this turned out ...

firebird-poc.txt

ITDEFENCE.ru Firebird is a relational database offering many ANSI SQL-92 features that runs on Linux, Windows, and a variety of Unix platforms. data-pdatarequest; MAPxdrshort, reinterpretcastdata-pdataincarnation; MAPxdrshort, reinterpretcastdata-pdatatransaction; MAPxdrshort,...

GLSA-200803-02 : Firebird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-02 Firebird: Multiple vulnerabilities Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing...

Firebird: Multiple vulnerabilities

Background Firebird is a multi-platform, open source relational database. Description Firebird does not properly handle certain types of XDR requests, resulting in an integer overflow CVE-2008-0387. Furthermore, it is vulnerable to a buffer overflow when processing usernames CVE-2008-0467. Impact...

Firebird username buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0467 BID: 27467 OSVDB: 40924 Background Firebird is a freely available relational database which is available for multiple platforms. Problem A buffer overflow vulnerability in Firebird allows remote, unauthenticated attackers to execute arbitrary commands by sendi...