PT-2007-3925 · Firebird · Firebird

Published 2007-05-11 · Updated 2018-10-16 · CVE-2007-2606

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Firebird version 2.1

Description The issue is related to multiple buffer overflows that allow attackers to trigger memory corruption and possibly have other unspecified impact. This is achieved via certain input processed by either the ConfigFile.cpp or check msgs.epp components.

Recommendations For Firebird version 2.1, consider restricting access to configuration files to minimize the risk of exploitation, especially if ConfigFile.cpp is involved in reading these files. As a temporary workaround, review and limit the input processed by ConfigFile.cpp and check msgs.epp to prevent buffer overflows until a patch is available.

Fix

Related Identifiers

CVE-2007-2606

Affected Products

Firebird

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2606 · Security Note
• http://debian.org/security/2008/dsa-1529 · Vendor Advisory
• http://securityreason.com/securityalert/2708 · Note
• http://secunia.com/advisories/29501 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34201 · Note
• http://securityfocus.com/bid/28478 · Note
• http://osvdb.org/37309 · Note
• http://securityfocus.com/archive/1/468070/100/0/threaded · Note
• http://osvdb.org/37308 · Note