SUSE-SA:2005:016: Mozilla Firefox

The remote host is missing the patch for the advisory SUSE-SA:2005:016 Mozilla Firefox. This security update for Mozilla Firefox fixes following problems: - CVE-2005-0231: 'Fire tabbing' The javascript security manager usually prevents that a javascript: URL from one host is opened in a window...

CVE-2004-2043

CVE-2004-2043 affects Firebird/InterBase-based systems, with a buffer overflow in the ibserver that can be triggered remotely by a long database name via the gsec command, causing a crash (DoS). Affected: Firebird 1.0 and other versions before 1.5 (Firebird2/InterBase-derived releases noted in De...

CVE-2004-2043

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...

GLSA-200405-18 : Buffer Overflow in Firebird

The remote host is affected by the vulnerability described in GLSA-200405-18 Buffer Overflow in Firebird A buffer overflow exists in three Firebird binaries gdsinetserver, gdslockmgr, and gdsdrop that is exploitable by setting a large value to the INTERBASE environment variable. Impact : An...

Firebird Database Detection

Binary data 2000.prm...

Interbase/Firebird Account Detection

Binary data 4512.prm...

Firebird Database Client Detection

Binary data 5181.prm...

Firebird Default Credentials

Binary data 4511.prm...

Firebird Database < 2.1.1.17910 Multiple Vulnerabilities

Binary data 4584.prm...

CVE-2004-0779

The vulnerability affects Mozilla 1.6, Firebird 0.7, and Firefox 0.8, where cached passwords for SSL sites are not properly restricted to SSL sessions. This allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site. Root cause: insufficient verification of SSL-...

CVE-2004-0718

The CVE-2004-0718 entry covers a frame-injection vulnerability affecting multiple browsers (Mozilla 1.6, Firebird 0.7, Firefox 0.8, Netscape 7.1) where a frame from one domain injects content into a frame in another domain, facilitating web-site spoofing and related attacks. The Connected documen...

[Full-Disclosure] Firebird [ AND Interbase 7 ] Database Remote Database Name Overflow

Someone that has had some success communicating things security wise to Borland may wish to contact them about this. root@CloneRiot bin rpm -ivh /root/InterBaseSSLI-V7.1.0-1.i386.rpm kf@CloneRiot bin$ pwd /opt/interbase/bin kf@CloneRiot bin$ ./gsec -database 127.0.0.1:perl -e'print "A"x300' gdb c...

Firebird Database Remote Database Name Overflow

Firebird Database Remote Database Name Overflow ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/unixfocus/5AP0P0UCUO.html SUMMARY http://firebird.sourceforge.net Firebird is "a relational database offering many ANSI SQL-92...

Firebird 1.0 - Remote Database Name Buffer Overrun

Firebird 1.0 - Remote Database Name Buffer Overrun source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling...

Firebird 1.0 - Remote Database Name Buffer Overrun

source: https://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A remote attacker may exploit this...

Firebird DB Remote Database Name Overflow

The remote host is running Firebird database. The remote version of this service is vulnerable to a remote stack-based overflow. An attacker, exploiting this hole, would be given full access to the target machine. Versions of Firebird database less than 1.5.0 are reportedly vulnerable to this...

[ GLSA 200405-18 ] Buffer Overflow in Firebird

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

[UNIX] Firebird Database Remote Database Name Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Buffer Overflow in Firebird

Background Firebird is an open source relational database that runs on Linux, Windows, and various UNIX systems. Description A buffer overflow exists in three Firebird binaries gdsinetserver, gdslockmgr, and gdsdrop that is exploitable by setting a large value to the INTERBASE environment variabl...

CVE-2004-2043

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...