CVE-2007-4669

The CVE-2007-4669 issue affects Firebird prior to 2.0.2: the Services API allows remote authenticated users (without SYSDBA) to read the server log (firebird.log) due to CORE-1148. Affected component is the Firebird server stack; vulnerability arises from insufficient access control around log ex...

CVE-2007-4668

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

CVE-2007-4667

Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149...

CVE-2007-4669

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log firebird.log, aka CORE-1148...

CVE-2007-4664

Unspecified vulnerability in the 1 attach database and 2 create database functionality in Firebird before 2.0.2, when a filename exceeds MAXPATHLEN, has unknown impact and attack vectors, aka CORE-1405...

Integer overflow

Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service CPU consumption via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop o...

CVE-2007-3527

Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service CPU consumption via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop o...

CVE-2007-3527

Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service CPU consumption via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop o...

CVE-2007-3527

Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service CPU consumption via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, which is treated as 0 and causes an infinite loop o...

CVE-2007-3527

CVE-2007-3527 : Firebird 2.0.0 contains an integer overflow that can be triggered by certain multi-byte character set operations, allowing remote authenticated users to cause a denial of service via CPU consumption due to an infinite loop when a 16-bit integer is set to 65536. The vulnerability a...

[Full-disclosure] [ GLSA 200707-01 ] Firebird: Buffer overflow

Gentoo Linux Security Advisory GLSA 200707-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Firebird database server buffer overflow

Buffer overflow on database connect request processing...

GLSA-200707-01 : Firebird: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200707-01 Firebird: Buffer overflow Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing 'connect' requests with an overly large 'pcnctcount' value. Impact : An unauthenticated remote attacker coul...

Firebird: Buffer overflow

Background Firebird is an open source relational database that runs on Linux, Windows, and various UNIX systems. Description Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing "connect" requests with an overly large "pcnctcount" value. Impact An unauthenticated...

CVE-2006-7211

fblockmgr in Firebird 1.5 uses weak permissions 0666 for the semaphore array, which allows local users to cause a denial of service blocked query processing by locking semaphores...

CVE-2006-7213

Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database...

CVE-2006-7214

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to 1 cause a denial of service application crash by sending many remote protocol versions; and 2 cause a denial of service connection drop via certain network traffic, as demonstrated by Nessus vulnerability scanning...

CVE-2006-7212

Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240...

CVE-2006-7213

Technical details about CVE-2006-7213 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2006-7213

Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database...