Firebird Relational Database Multiple Remote Vulnerabilities

Bugtraq ID:	28474
Class:	Unknown
CVE:	CVE-2006-7211 CVE-2006-7212 CVE-2006-7213 CVE-2006-7214
Remote:	Yes
Local:	No
Published:	Jun 15 2006 12:00AM
Updated:	Mar 27 2008 04:49PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Firebird Firebird 1.5 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	Firebird Firebird 2.0

Firebird Relational Database Multiple Remote Vulnerabilities

Firebird is prone to multiple remote vulnerabilities, including buffer-overflow, security-bypass, and denial-of-service issues.

An attacker may exploit these issues to bypass certain security restrictions, cause denial-of-service conditions, or potentially execute arbitrary code in the context of the affected application.

The issues affect Firebird 1.5; other versions may also be vulnerable.

Firebird Relational Database Multiple Remote Vulnerabilities

Exploits may not be required for some of these issues.

Firebird Relational Database Multiple Remote Vulnerabilities

Solution:
The vendor has released updates. Please see the references for more information.

Firebird Relational Database Multiple Remote Vulnerabilities

References:

• Firebird 2.0 Release Notes (Firebrd)
  
• Firebird Homepage (Firebird)