PT-2007-3925 · Firebird · Firebird

Publicado 2007-05-11 · Atualizado 2018-10-16 · CVE-2007-2606

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Firebird version 2.1

Description The issue is related to multiple buffer overflows that allow attackers to trigger memory corruption and possibly have other unspecified impact. This is achieved via certain input processed by either the ConfigFile.cpp or check msgs.epp components.

Recommendations For Firebird version 2.1, consider restricting access to configuration files to minimize the risk of exploitation, especially if ConfigFile.cpp is involved in reading these files. As a temporary workaround, review and limit the input processed by ConfigFile.cpp and check msgs.epp to prevent buffer overflows until a patch is available.

Correção

Identificadores relacionados

CVE-2007-2606

Produtos afetados

Firebird

Referências · 9

• http://securityreason.com/securityalert/2708 · Nota
• http://secunia.com/advisories/29501 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34201 · Nota
• http://securityfocus.com/bid/28478 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2606 · Nota de Segurança
• http://osvdb.org/37309 · Nota
• http://securityfocus.com/archive/1/468070/100/0/threaded · Nota
• http://debian.org/security/2008/dsa-1529 · Aviso do Fabricante
• http://osvdb.org/37308 · Nota