Firebird Relational Database isc_create_database() Buffer Overflow

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted create request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Firebird Relational Database...

[RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Firebird Relational Database Multiple Buffer Overflow Vulnerabilities http://risesecurity.org/advisory/RISE-2007003/ Published: October 3, 2007 Updated: October 3, 2007 INTRODUCTION There exists multiple vulnerabilities within functions of Firebird...

firebird -- multiple remote buffer overflow vulnerabilities

RISE Security reports: There exists multiple vulnerabilities within functions of Firebird Relational Database, which when properly exploited can lead to remote compromise of the vulnerable system...

CVE-2007-4665

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

CVE-2007-4669

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4666

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

Code injection

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

Code injection

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...

Design/Logic Flaw

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4666

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

CVE-2007-4668

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

Code injection

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4669

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

CVE-2007-4668

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4665

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service daemon crash via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403...