10

CVE-2007-5245

Exploit
Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors involving the INET_connect function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Firebirdsql ≫ Firebird Version1.5.3.4870 Editionlinux
Firebirdsql ≫ Firebird Version1.5.3.4870 Editionwindows
Firebirdsql ≫ Firebird Version1.5.4.4910 Editionlinux
Firebirdsql ≫ Firebird Version1.5.4.4910 Editionwindows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.88% 0.946
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://risesecurity.org/blog/entry/3/
Exploit
http://www.securityfocus.com/bid/25917
Exploit
http://risesecurity.org/advisory/RISE-2007003/
Exploit
http://risesecurity.org/exploit/18/
http://secunia.com/advisories/27066
http://secunia.com/advisories/28635
http://www.risesecurity.org/advisory/RISE-2007003/
http://www.securityfocus.com/archive/1/481491/100/0/threaded
http://www.securityfocus.com/bid/25925
http://www.securitytracker.com/id?1018773
http://www.vupen.com/english/advisories/2007/3380
https://exchange.xforce.ibmcloud.com/vulnerabilities/36957