GLSA-200707-01 : Firebird: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200707-01 Firebird: Buffer overflow Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing 'connect' requests with an overly large 'pcnctcount' value. Impact : An unauthenticated remote attacker coul...

Firebird: Buffer overflow

Background Firebird is an open source relational database that runs on Linux, Windows, and various UNIX systems. Description Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing "connect" requests with an overly large "pcnctcount" value. Impact An unauthenticated...

CVE-2006-7214

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to 1 cause a denial of service application crash by sending many remote protocol versions; and 2 cause a denial of service connection drop via certain network traffic, as demonstrated by Nessus vulnerability scanning...

CVE-2006-7211

fblockmgr in Firebird 1.5 uses weak permissions 0666 for the semaphore array, which allows local users to cause a denial of service blocked query processing by locking semaphores...

CVE-2006-7212

Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240...

CVE-2006-7213

Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database...

CVE-2006-7214

CVE-2006-7214 affects Firebird 1.5. The connected sources indicate multiple vulnerabilities in Firebird 1.5 that can be triggered remotely: (1) a denial of service (application crash) by sending many remote protocol versions, and (2) denial of service (connection drop) through certain network tra...

CVE-2006-7212

Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240...

CVE-2006-7212

CVE-2006-7212 refers to multiple buffer overflows in Firebird 1.5, including one affecting WNET. The CVE entry provides no explicit impact vectors. A Debian advisory (DSA-1529-1) lists CVE-2006-7212 among several issues and notes that exploitation could lead to arbitrary code execution or denial ...

CVE-2006-7213

Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database...

CVE-2006-7211

fblockmgr in Firebird 1.5 uses weak permissions 0666 for the semaphore array, which allows local users to cause a denial of service blocked query processing by locking semaphores...

CVE-2006-7211

Affected product : Firebird 1.5 (fb_lock_mgr). Vulnerability : uses weak permissions (0666) for the semaphore array, enabling local attackers to cause a denial of service by locking semaphores. Root cause / detail : weak permissions on the semaphore array in Firebird 1.5. Impact : local denial of...

CVE-2006-7213

Technical details about CVE-2006-7213 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2006-7214

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to 1 cause a denial of service application crash by sending many remote protocol versions; and 2 cause a denial of service connection drop via certain network traffic, as demonstrated by Nessus vulnerability scanning...

Firebird DataBase Server fbserver.exe p_cnct_count Value Remote Overflow

The version of Firebird installed on the remote host is vulnerable to a buffer overflow in its protocol handling routine. By sending a specially crafted 'opconnect' request, a remote, unauthenticated attacker can execute code on the affected host with SYSTEM privileges. %NASLMINLEVEL 70300 C...

CVE-2007-3181

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large pcnctcount value in a pcnct structure in a connect 0x01 request to port 3050/tcp, related to "an InterBase version of gds32.dll."...

CVE-2007-3181

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large pcnctcount value in a pcnct structure in a connect 0x01 request to port 3050/tcp, related to "an InterBase version of gds32.dll."...

Buffer overflow

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large pcnctcount value in a pcnct structure in a connect 0x01 request to port 3050/tcp, related to "an InterBase version of gds32.dll."...

CVE-2007-3181

CVE-2007-3181 affects Firebird SQL: a buffer overflow in fbserver.exe on Firebird

CVE-2007-3181

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large pcnctcount value in a pcnct structure in a connect 0x01 request to port 3050/tcp, related to "an InterBase version of gds32.dll."...