PT-2017-3824 · Firebird+2 · Firebird+2
Publicado
2017-03-24
·
Atualizado
2025-10-10
·
CVE-2017-6369
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Firebird versions 2.5.x through 2.5.6
Firebird versions 3.0.x through 3.0.1
Description
The issue is related to insufficient checks in the UDF subsystem, allowing remote authenticated users to execute code. This can be achieved by using a 'system' entrypoint from fbudf.so. The vulnerability is associated with errors in executing user-defined functions (UDF) in database management systems.
Recommendations
For Firebird versions 2.5.x through 2.5.6, update to version 2.5.7 or later.
For Firebird versions 3.0.x through 3.0.1, update to version 3.0.2 or later.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Firebird
Suse
Ubuntu