CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-0467

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1570%
EPSS Percentile11.55th
Published2008年1月29日
Last Modified2026年4月23日

Vulnerability Description

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.

Affected Platforms (CPE)

📦
Firebirdsql

Firebird

<= 2.0.3
📦
Firebirdsql

Firebird

<= 2.1

References & Advisories

🔗 http://secunia.com/advisories/28596
🔗 http://secunia.com/advisories/29203
🔗 http://secunia.com/advisories/29501
🔗 http://security.gentoo.org/glsa/glsa-200803-02.xml
🔗 http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800
🔗 http://sourceforge.net/project/shownotes.php?release_id=570816&group_id=9028
🔗 http://tracker.firebirdsql.org/browse/CORE-1603
🔗 http://www.debian.org/security/2008/dsa-1529

関連する脆弱性情報

CVE-2007-524610.0

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote...

CVE-2007-524510.0

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote att...

CVE-2007-318110.0

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnc...

CVE-2007-499210.0

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execut...