PT-2004-2939 · Firebird · Firebird Database

Aviram Jenik + 1 · Publicado 2004-05-01 · Atualizado 2017-07-11 · CVE-2004-2043

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firebird Database versions 1.0 through 1.5

Description A buffer overflow issue in the ibserver component allows remote attackers to cause a denial of service by crashing the system with a long database name. This can be demonstrated using the gsec command.

Recommendations For Firebird Database versions 1.0 through 1.5, update to version 1.5 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2004-2043

DSA-1014-1

Produtos afetados

Firebird Database

Referências · 15

• 🔥 https://exploit-db.com/exploits/303 · Exploit
• 🔥 https://exploit-db.com/exploits/24165 · Exploit
• 🔥 http://securityfocus.com/bid/10446 · Exploit
• 🔥 http://securiteam.com/unixfocus/5AP0P0UCUO.html · Exploit
• http://osvdb.org/6624 · Nota
• http://debian.org/security/2006/dsa-1014 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16229 · Nota
• http://osvdb.org/6408 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=108611386202493&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2043 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html · Nota
• http://securitytracker.com/id?1010381 · Nota
• http://secunia.com/advisories/11756 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16316 · Nota
• http://secunia.com/advisories/19350 · Nota