CVE Vulnerabilities

CVE-2007-2606

Published: May 11, 2007 | Modified: Oct 16, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) configConfigFile.cpp or (2) msgscheck_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.

Affected Software

Name Vendor Start Version End Version
Firebird Firebirdsql 2.1 (including) 2.1 (including)
Firebird2 Ubuntu dapper *
Firebird2 Ubuntu edgy *
Firebird2 Ubuntu feisty *

References