OSVDB ID: 37313

Title: Firebird Server Crafted XNET Session Remote DoS

Info

Disclosure

Aug 30, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Denial of Service
Impact: Loss of Availability

Solution

Upgrade to version 2.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

FrSIRT Advisory: ADV-2007-3021
Bugtraq ID: 25497
Vendor Specific News/Changelog Entry: http://sourceforge.net/project/shownotes.php?release_id=535898
http://tracker.firebirdsql.org/browse/CORE-1403
http://www.firebirdsql.org/index.php?op=files&id=engine_202
http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
Related OSVDB ID: 37310 37311 37312 37314
Other Advisory URL: http://lists.debian.org/debian-security-announce/2008/msg00098.html
http://sourceforge.net/project/shownotes.php?release_id=535898
ISS X-Force ID: 36353
Secunia Advisory ID: 26615 29501
CVE ID: 2007-4665 (see also: NVD)
Keyword: CORE-1403

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218