PT-2013-1302 · Firebird+1 · Firebird+1

Spencer Mcintyre + 1 · Published 2013-03-15 · Updated 2016-12-07 · CVE-2013-2492

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firebird versions 2.1.3 through 2.1.5 Firebird versions 2.5.1 through 2.5.3

Description The issue is caused by a stack-based buffer overflow in the Firebird database management system. This can be exploited by a remote attacker who sends a specially crafted TCP packet to port 3050, potentially allowing the execution of arbitrary code. The vulnerability is related to a missing size check during the extraction of a group number from CNCT information.

Recommendations For Firebird versions 2.1.3 through 2.1.5, update to a version after 18514 to resolve the issue. For Firebird versions 2.5.1 through 2.5.3, update to a version after 26623 to resolve the issue. As a temporary workaround, consider restricting access to TCP port 3050 to minimize the risk of exploitation.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-11680

CVE-2013-2492

DSA-2647-1

DSA-2648-1

OPENSUSE-SU-2013_0496-1

OPENSUSE-SU-2013_0504-1

Affected Products

Firebird

Suse

References · 19

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_cnct_group.rb · Exploit
• 🔥 http://tracker.firebirdsql.org/browse/CORE-4058 · Exploit
• 🔥 https://gist.github.com/zeroSteiner/85daef257831d904479c · Exploit
• 🔥 https://exploit-db.com/exploits/41709 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2492 · Security Note
• http://debian.org/security/2013/dsa-2648 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2492 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-2492 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-2492 · Security Note
• http://debian.org/security/2013/dsa-2647 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00036.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00039.html · Vendor Advisory
• https://security.gentoo.org/glsa/201512-11 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11680 · Security Note
• http://securityfocus.com/bid/58393 · Note