CVEブラウザに戻る

CVE-2007-3181

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1760%

EPSS Percentile22.50th

Published2007年6月12日

Last Modified2026年4月23日

Vulnerability Description

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gds32.dll."

Affected Platforms (CPE)

📦

Bakbone

Netvault

= 6.x

📦

Firebirdsql

Firebird

<= 2.0.0

References & Advisories

🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-07-11

🔗 http://osvdb.org/37231

🔗 http://secunia.com/advisories/25601

🔗 http://secunia.com/advisories/25872

🔗 http://secunia.com/advisories/29501

🔗 http://security.gentoo.org/glsa/glsa-200707-01.xml

🔗 http://www.debian.org/security/2008/dsa-1529

🔗 http://www.firebirdsql.org/rlsnotes/Firebird-2.0.1-ReleaseNotes.pdf

関連する脆弱性情報

CVE-2007-391110.0

Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server...

CVE-2015-406710.0

Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via ...

CVE-2005-100910.0

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified comp...

CVE-2017-174149.8

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.1...