Max CVSS 10.0 Min CVSS 4.0 Total Count15
IDCVSSSummaryLast (major) updatePublished
CVE-2007-3527 6.8
Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets that trigger an attempt to use the value 65536 for a 16-bit integer, wh
30-10-2012 - 22:39 03-07-2007 - 14:30
CVE-2007-3181 10.0
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gd
30-10-2012 - 22:37 12-06-2007 - 19:30
CVE-2007-2606 7.8
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a co
30-10-2012 - 22:35 11-05-2007 - 06:19
CVE-2008-0467 10.0
Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.
07-03-2011 - 22:04 28-01-2008 - 21:00
CVE-2007-4668 5.0
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
07-03-2011 - 21:58 04-09-2007 - 18:17
CVE-2007-4667 5.0
Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.
07-03-2011 - 21:58 04-09-2007 - 18:17
CVE-2007-4666 5.0
Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka COR
07-03-2011 - 21:58 04-09-2007 - 18:17
CVE-2007-4665 5.0
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.
07-03-2011 - 21:58 04-09-2007 - 18:17
CVE-2007-4664 7.5
Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.
07-03-2011 - 21:58 04-09-2007 - 18:17
CVE-2008-0387 7.8
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_s
05-09-2008 - 17:34 28-01-2008 - 21:00
CVE-2007-4669 4.0
The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
05-09-2008 - 17:28 04-09-2007 - 18:17
CVE-2006-7214 7.8
Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of service (connection drop) via certain network traffic
05-09-2008 - 17:16 29-06-2007 - 14:30
CVE-2006-7213 5.5
Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.
05-09-2008 - 17:16 29-06-2007 - 14:30
CVE-2006-7212 6.8
Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240.
05-09-2008 - 17:16 29-06-2007 - 14:30
CVE-2006-7211 4.9
fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.
05-09-2008 - 17:16 29-06-2007 - 14:30
Back to Top Mark selected
Back to Top