Firebird关系数据库protocol.cpp XDR协议远程内存破坏漏洞

BUGTRAQ ID: 27403 CVECAN ID: CVE-2008-0387 Firebird是一款提供多个ANSI SQL-92功能的关系型数据库，可运行在Linux、Windows和各种Unix平台下。 Firebird在处理畸形格式的数据时存在漏洞，远程攻击者可能利用此漏洞导致拒绝服务。 如果Firebird的协议解析器（src/remote/protocol.cpp）接受到了任何带有有效数据的以下操作的时候： opreceive opstart opstartandreceive opsend opstartandsend opstartsendandreceive...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CVE-2008-0387

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted 1 opreceive, 2 opstart, 3 opstartandreceive, 4 opsend, 5 opstartandsend, and 6 opstartsendandreceive XDR...

CORE-2007-1219: Firebird Remote Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...

Firebird SQL server integer overflow

Integer overflow on XDR parsing leads to memory corruption...

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption source: https://www.securityfocus.com/bid/27403/info Firebird is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to...

Core Security Technologies Advisory 2007.1219

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Firebird Remote Memory Corruption Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL:...

Firebird Remote Memory Corruption

Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL: https://www.coresecurity.com/core-labs/advisories/firebird-remote-memory-corruption Date published: 2008-01-28 Date of last update: 2008-01-24 Vendors contacted: Firebird SQL Release mode:...

Firebird 2.0.3 Relational Database - 'protocol.cpp' XDR Protocol Remote Memory Corruption

source: https://www.securityfocus.com/bid/27403/info Firebird is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to overflow a buffer and to corrupt process memory. Attackers may be able to execute arbitrar...

Sun Solaris NFS Server XDR处理拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理NFS请求中的XDR数据存在问题，远程攻击者可以利用漏洞对NFS服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10 可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-26-102965-1&searchclause=...

Code injection

Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service system crash via certain XDR data in NFS requests, probably related to processing of data by the xdrbool and xdrmblkgetint32 functions...

CVE-2007-3223

Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service system crash via certain XDR data in NFS requests, probably related to processing of data by the xdrbool and xdrmblkgetint32 functions...

SOL1956 - Integer Overflow In XDR Library - CA-2002-25

Information about this advisory can be found at the following location:...

CVE-2007-2136

Stack-based buffer overflow in bgssdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed...

Stack overflow

Stack-based buffer overflow in bgssdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed...

CVE-2007-2136

Stack-based buffer overflow in bgssdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed...

BMC Patrol PerformAgent memory corruption

Buffer overflow on bgssdservice.exe TCP/10128 XDR data parsing...

ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of BMC Patrol. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper parsing of XDR data sent to the bgssdservice.exe process listening by default on TCP po...