Firebirdsql vulnerabilities, page 3
46 vulnerabilities
Known vulnerabilities in Firebirdsql products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2006-1240firebirdsqlfirebird
EPSS score0.88%
Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.CVE-2006-1241firebirdsqlfirebirdEPSS score0.49%
Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities.CVE-2006-7211firebirdsqlfirebirdEPSS score0.31%
fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.CVE-2006-7212firebirdsqlfirebirdEPSS score1.12%
Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240.CVE-2006-7213firebirdsqlfirebirdEPSS score0.97%
Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.CVE-2006-7214firebirdsqlfirebirdEPSS score1.62%
Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of service (connection drop) via certain network traffic, as demonstrated by Nessus vulnerability scanning.