|
Firebird 2 Multiple Vulnerabilities and Weakness
|
|
Secunia Advisory:
|
SA31064
|
|
|
Release Date:
|
2008-07-15
|
|
Popularity:
|
1,390 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Exposure of system information
Exposure of sensitive information
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Partial Fix
|
|
| Software: | Firebird 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Some vulnerabilities and a weakness have been reported in Firebird, which can be exploited by malicious users to cause a DoS (Denial of Service) and disclose system information, and by malicious, local users to disclose sensitive information.
1) An error when processing specially crafted expressions can be exploited to cause a memory corruption.
2) An error when processing an "EXECUTE STATEMENT" can be exploited to cause a memory corruption and crash the server.
3) An error when handling altered procedures can be exploited to cause a crash.
Successful exploitation of the vulnerabilities requires valid Firebird credentials on the affected server.
4) An unspecified error can be exploited to disclose the server's installation directory.
For more information:
SA31003
5) The problem is that database files are created with improper access rights. This can be exploited by unprivileged local users to disclose the content of database files.
The vulnerabilities are reported in versions 2.0.4 and 2.1.0. Other versions may also be affected.
Solution:
The vulnerabilities are fixed in version 2.5 Alpha 1.
Update to version 2.1.1, which fixes vulnerabilities #1, #4, and #5.
http://sourceforge.net/project/showfiles.php?group_id=9028
Restrict access to trusted users only.
Provided and/or discovered by:
Reported by the vendor.
Original Advisory:
http://tracker.firebirdsql.org/browse/CORE-1845
http://tracker.firebirdsql.org/browse/CORE-1884
http://tracker.firebirdsql.org/browse/CORE-1887
http://tracker.firebirdsql.org/browse/CORE-1919
http://tracker.firebirdsql.org/browse/CORE-1930
Other References:
SA31003:
http://secunia.com/advisories/31003/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
