PT-2004-2939 · Firebird · Firebird Database

Aviram Jenik + 1 · Published 2004-05-01 · Updated 2017-07-11 · CVE-2004-2043

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firebird Database versions 1.0 through 1.5

Description A buffer overflow issue in the ibserver component allows remote attackers to cause a denial of service by crashing the system with a long database name. This can be demonstrated using the gsec command.

Recommendations For Firebird Database versions 1.0 through 1.5, update to version 1.5 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2004-2043

DSA-1014-1

Affected Products

Firebird Database

References · 15

• 🔥 https://exploit-db.com/exploits/303 · Exploit
• 🔥 https://exploit-db.com/exploits/24165 · Exploit
• 🔥 http://securityfocus.com/bid/10446 · Exploit
• 🔥 http://securiteam.com/unixfocus/5AP0P0UCUO.html · Exploit
• http://debian.org/security/2006/dsa-1014 · Vendor Advisory
• http://osvdb.org/6408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2043 · Security Note
• http://secunia.com/advisories/11756 · Vendor Advisory
• http://osvdb.org/6624 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16229 · Note
• http://marc.info/?l=bugtraq&m=108611386202493&w=2 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html · Note
• http://securitytracker.com/id?1010381 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16316 · Note
• http://secunia.com/advisories/19350 · Note