Firebird username buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0467 BID: 27467 OSVDB: 40924 Background Firebird is a freely available relational database which is available for multiple platforms. Problem A buffer overflow vulnerability in Firebird allows remote, unauthenticated attackers to execute arbitrary commands by sendi...

Firebird username buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0467 BID: 27467 OSVDB: 40924 Background Firebird is a freely available relational database which is available for multiple platforms. Problem A buffer overflow vulnerability in Firebird allows remote, unauthenticated attackers to execute arbitrary commands by sendi...

Firebird username buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0467 BID: 27467 OSVDB: 40924 Background Firebird is a freely available relational database which is available for multiple platforms. Problem A buffer overflow vulnerability in Firebird allows remote, unauthenticated attackers to execute arbitrary commands by sendi...

Firebird关系数据库Username参数远程栈溢出漏洞

BUGTRAQ ID: 27467 Firebird是一款提供多个ANSI SQL-92功能的关系型数据库，可运行在Linux、Windows和各种Unix平台下。 Firebird在处理畸形的用户请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向Firebird服务器提交了超长用户名的话，就可能触发栈溢出，导致执行任意指令。 Firebird Firebird 2.1 Beta 1 Firebird Firebird 2.1 Alpha 1 Firebird Firebird 2.0.3 Firebird Firebird 2.0.2 Firebird Firebi...

Stack overflow

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username...

Integer overflow

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0467

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username...

CVE-2008-0467

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0467

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0467

CVE-2008-0467 describes a stack-based buffer overflow in Firebird before 2.0.4 and in 2.1.x before 2.1.0 RC1, exploitable by a remote, unauthenticated attacker via a long username in received messages. Successful exploitation can lead to arbitrary code execution with the service’s privileges; in ...

CVE-2008-0387

Firebird CVE-2008-0387: A vulnerability in External Data Representation (XDR) processing allows memory corruption via crafted XDR requests, potentially enabling remote code execution. Affected: Firebird releases up to 2.1.x before RC1, including 1.0.3 and 1.5.x before 1.5.6, 2.0.x before 2.0.4. S...

DTSA-112-1 firebird2.0 - remote denial of service

Bulletin has no description...

Firebird SQL server integer overflow

Integer overflow on XDR parsing leads to memory corruption...

CORE-2007-1219: Firebird Remote Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption source: https://www.securityfocus.com/bid/27403/info Firebird is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to...

Core Security Technologies Advisory 2007.1219

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...

Firebird Remote Memory Corruption

Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL: https://www.coresecurity.com/core-labs/advisories/firebird-remote-memory-corruption Date published: 2008-01-28 Date of last update: 2008-01-24 Vendors contacted: Firebird SQL Release mode:...