CVE-2017-11509
Summary
| CVE | CVE-2017-11509 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-03-28 17:29:00 UTC |
| Updated | 2021-11-23 22:14:00 UTC |
| Description | An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] [DLA 2824-1] firebird3.0 security update |
MLIST |
lists.debian.org |
|
| [SECURITY] [DLA 2129-1] firebird2.5 security update |
MLIST |
lists.debian.org |
|
| [SECURITY] [DLA 1374-1] firebird2.5 security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| [R1] Firebird fbudf Module Authenticated Remote Code Execution - Research Advisory | Tenable™ |
MISC |
www.tenable.com |
Exploit, Mitigation, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178907 Debian Security Update for firebird3.0 (DLA 2824-1)