CVE-2004-2043 Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (...
MediumCVSS 5.0
EPSS 11.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| borland software interbase | = 4.0 | No fix listed |
| borland software interbase | = 5.0 | No fix listed |
| borland software interbase | = 6.0 | No fix listed |
| borland software interbase | = 6.4 | No fix listed |
| borland software interbase | = 6.5 | No fix listed |
| borland software interbase | = 7.0 | No fix listed |
| borland software interbase | = 7.1 | No fix listed |
| borland software interbase superserver | = 6.0 | No fix listed |
| firebirdsql firebird | = 1.0 | No fix listed |
References
- 20040602 Firebird [ AND Interbase 7 ] Database Remote Database Name Overflow mailing-list
- 20040601 Firebird Database Remote Database Name Overflow mailing-list
- 11756 patch third-party-advisory vendor-advisory
- 19350 third-party-advisory
- 1010381 vdb-entry
- DSA-1014 vendor-advisory
- 6408 vdb-entry vendor-advisory
- 6624 vdb-entry
- www.securiteam.com exploit vendor-advisory
- 10446 exploit vdb-entry vendor-advisory
- firebird-database-name-bo(16229) vdb-entry
- interbase-database-name-bo(16316) vdb-entry