CVE-2009-2620: Input Validation
First published: Tue Jul 28 2009(Updated: )
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firebirdsql Firebird | =2.1 | |
| Firebirdsql Firebird | =2.1.2 | |
| Firebirdsql Firebird | =2.5 | |
| Firebirdsql Firebird | =2.0.0.12748 | |
| Firebirdsql Firebird | =1.5.2 | |
| Firebirdsql Firebird | =2.0.1 | |
| Firebirdsql Firebird | =2.0.0 | |
| Firebirdsql Firebird | =2.5-beta_2 | |
| Firebirdsql Firebird | <=2.0.3 | |
| Firebirdsql Firebird | =1.5.5 | |
| Firebirdsql Firebird | =2.1.3-rc1 | |
| Firebirdsql Firebird | =1.5.4.4910 | |
| Firebirdsql Firebird | =1.5.2.4731 | |
| Firebirdsql Firebird | =1.5 | |
| Firebirdsql Firebird | =1.5.1 | |
| Firebirdsql Firebird | =1.5.3.4870 | |
| Firebirdsql Firebird | =2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://tracker.firebirdsql.org/browse/CORE-2563
- http://www.securityfocus.com/bid/35842
- http://www.coresecurity.com/content/firebird-sql-dos
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.html
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.html
- https://bugzilla.redhat.com/show_bug.cgi?id=514463
- http://www.exploit-db.com/exploits/9295
- http://www.securityfocus.com/bid/35842/info
- http://www.securityfocus.com/data/vulnerabilities/exploits/35842.py
- http://firebird.cvs.sourceforge.net/viewvc/firebird/firebird2/src/remote/server.cpp?r1=1.158.2.6&r2=1.158.2.7&view=patch
- https://access.redhat.com/security/cve/CVE-2009-2620
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-1.fc10
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-1.el5
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-1.el4
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-1.fc11
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-2.fc10
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-2.el4
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-2.fc11
- http://admin.fedoraproject.org/updates/firebird-2.1.3.18185.0-2.el5
- https://www.cve.org/CVERecord?id=CVE-2009-2620 https://nvd.nist.gov/vuln/detail/CVE-2009-2620
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2620.json
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-2620
- collector/redhat-cve
- agent/type
- agent/references
- agent/author
- agent/remedy
- agent/severity
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/firebirdsql
- canonical/firebirdsql firebird
- version/firebirdsql firebird/2.1
- version/firebirdsql firebird/2.1.2
- version/firebirdsql firebird/2.5
- version/firebirdsql firebird/2.0.0.12748
- version/firebirdsql firebird/1.5.2
- version/firebirdsql firebird/2.0.1
- version/firebirdsql firebird/2.0.0
- version/firebirdsql firebird/2.5-beta_2
- version/firebirdsql firebird/2.0.3
- version/firebirdsql firebird/1.5.5
- version/firebirdsql firebird/2.1.3-rc1
- version/firebirdsql firebird/1.5.4.4910
- version/firebirdsql firebird/1.5.2.4731
- version/firebirdsql firebird/1.5
- version/firebirdsql firebird/1.5.1
- version/firebirdsql firebird/1.5.3.4870
- version/firebirdsql firebird/2.0.2