Vulnerabilities > Firebirdsql > Firebird > 2.5.5

DATE CVE VULNERABILITY TITLE RISK
2017-03-24 CVE-2017-6369 Missing Authorization vulnerability in Firebirdsql Firebird
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.
network
low complexity
firebirdsql CWE-862
6.5
2016-01-13 CVE-2016-1569 Improper Input Validation vulnerability in Firebirdsql Firebird 2.5.5
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.
network
low complexity
firebirdsql CWE-20
4.0