CVE-2007-3181 Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to por...
HighCVSS 10.0
EPSS 13.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gds32.dll."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bakbone netvault | = 6.x | No fix listed |
| firebirdsql firebird | <= 2.0.0 | No fix listed |
References
- dvlabs.tippingpoint.com vendor-advisory
- 37231 vdb-entry
- 25601 patch third-party-advisory vendor-advisory
- 25872 third-party-advisory
- 29501 third-party-advisory
- GLSA-200707-01 vendor-advisory
- DSA-1529 vendor-advisory
- www.firebirdsql.org
- 24436 exploit patch vdb-entry
- ADV-2007-2149 vdb-entry
- firebird-fbserver-bo(34833) vdb-entry