PT-2006-2257 · Firebird · Firebird

Publicado 2006-03-15 · Atualizado 2018-10-18 · CVE-2006-1241

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firebird version 1.5.2.4731

Description The issue is related to the installation of certain components with setuid firebird permissions, which could potentially allow local users to gain privileges. This might occur due to a buffer overflow or possibly other vulnerabilities.

Recommendations For Firebird version 1.5.2.4731, consider removing setuid firebird permissions from the fb lock mgr, gds drop, and fb inet server installations as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-1241

Produtos afetados

Firebird

Referências · 5

• 🔥 http://securityfocus.com/bid/17077 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25282 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1241 · Nota de Segurança
• http://securityfocus.com/archive/1/427480/100/0/threaded · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html · Nota