CVE-2007-3181

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gds32.dll."

🔗 References (22)

• cve@mitrehttp://dvlabs.tippingpoint.com/advisory/TPTI-07-11
• cve@mitrehttp://osvdb.org/37231
• cve@mitrehttp://secunia.com/advisories/25601
• cve@mitrehttp://secunia.com/advisories/25872
• cve@mitrehttp://secunia.com/advisories/29501
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200707-01.xml
• cve@mitrehttp://www.debian.org/security/2008/dsa-1529
• cve@mitrehttp://www.firebirdsql.org/rlsnotes/Firebird-2.0.1-ReleaseNotes.pdf
• cve@mitrehttp://www.securityfocus.com/bid/24436
• cve@mitrehttp://www.vupen.com/english/advisories/2007/2149
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/34833
• af854a3a-2127-422b-91ae-364da2661108http://dvlabs.tippingpoint.com/advisory/TPTI-07-11
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/37231
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25601
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25872