Vulnerabilities > Firebirdsql > Firebird > 1.5.4.4910

DATE CVE VULNERABILITY TITLE RISK
2014-12-16 CVE-2014-9323 Null Pointer Dereference vulnerability in multiple products
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.
network
low complexity
firebirdsql opensuse debian canonical CWE-476
5.0
2009-07-29 CVE-2009-2620 Improper Input Validation vulnerability in Firebirdsql Firebird
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.
network
low complexity
firebirdsql CWE-20
5.0
2008-01-29 CVE-2008-0467 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Firebirdsql Firebird
Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.
network
low complexity
firebirdsql CWE-119
critical
10.0
2008-01-29 CVE-2008-0387 Numeric Errors vulnerability in Firebirdsql Firebird
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.
network
low complexity
firebirdsql CWE-189
7.8
2007-10-06 CVE-2007-5245 Buffer Errors vulnerability in Firebirdsql Firebird 1.5.3.4870/1.5.4.4910
Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the SVC_attach function or (2) unspecified vectors involving the INET_connect function.
network
low complexity
firebirdsql CWE-119
critical
10.0
2007-09-04 CVE-2007-4669 Permissions, Privileges, and Access Controls vulnerability in Firebirdsql Firebird
The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
network
low complexity
firebirdsql CWE-264
4.0
2007-09-04 CVE-2007-4668 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Firebirdsql Firebird
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
network
low complexity
firebirdsql CWE-119
5.0
2007-09-04 CVE-2007-4667 Multiple vulnerability in Firebird
Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.
network
low complexity
firebirdsql
5.0
2007-09-04 CVE-2007-4666 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Firebirdsql Firebird
Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.
network
low complexity
firebirdsql CWE-119
5.0
2007-09-04 CVE-2007-4665 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Firebirdsql Firebird
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.
network
low complexity
firebirdsql CWE-119
5.0