Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

Multiple security problems have been discovered in the Firebird database, which may lead to the execution of arbitrary code or denial of service. 

This Debian security advisory is a bit unusual.  While it\'s normally our strict policy to backport security bugfixes to older releases, this turned out to be infeasible for Firebird 1.5 due to large infrastructural changes necessary to fix these issues.  As a consequence security support for Firebird 1.5 is hereby discontinued.

The remote host is affected by the vulnerability described in GLSA-200803-02 (Firebird: Multiple vulnerabilities)

    Firebird does not properly handle certain types of XDR requests,     resulting in an integer overflow (CVE-2008-0387). Furthermore, it is     vulnerable to a buffer overflow when processing usernames     (CVE-2008-0467).
  Impact :

    A remote attacker could send specially crafted XDR requests or an     overly long username to the vulnerable server, possibly resulting in     the remote execution of arbitrary code with the privileges of the user     running the application.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
38955	Debian DSA-1529-1 : firebird -- multiple vulnerabilities	Nessus	Debian Local Security Checks	Local	critical
31329	GLSA-200803-02 : Firebird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical

Detections

Analytics

CVE-2008-0387

critical

Tenable Plugins

critical

critical