CVE-2007-4992 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4992
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4992

Description: Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/37079 ST 1018802 SAID Secunia Advisory: SA27982 MISC http://www.zerodayinitiative.com/advisories/ZDI-07-057.html GENTOO http://security.gentoo.org/glsa/glsa-200712-06.xml CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=195569 http://www.firebirdsql.org/rlsnotes/Firebird-2.0.3-ReleaseNotes.pdf BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/482025/100/0/threaded BID 26011

Return to the previous page.