PT-2006-2257 · Firebird · Firebird

Published 2006-03-15 · Updated 2018-10-18 · CVE-2006-1241

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firebird version 1.5.2.4731

Description The issue is related to the installation of certain components with setuid firebird permissions, which could potentially allow local users to gain privileges. This might occur due to a buffer overflow or possibly other vulnerabilities.

Recommendations For Firebird version 1.5.2.4731, consider removing setuid firebird permissions from the fb lock mgr, gds drop, and fb inet server installations as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1241

Affected Products

Firebird

References · 5

• 🔥 http://securityfocus.com/bid/17077 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1241 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25282 · Note
• http://securityfocus.com/archive/1/427480/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html · Note