ID CVE-2006-7213
Summary Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.
References
Vulnerable Configurations
  • cpe:2.3:a:firebirdsql:firebird:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:firebirdsql:firebird:1.5:*:*:*:*:*:*:*
CVSS
Base: 5.5 (as of 05-09-2008 - 21:16)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:N
refmap via4
bid 28474
confirm http://www.firebirdsql.org/rlsnotes/Firebird-2.0-ReleaseNotes.pdf
debian DSA-1529
secunia 29501
Last major update 05-09-2008 - 21:16
Published 29-06-2007 - 18:30
Last modified 05-09-2008 - 21:16
Back to Top