Description
Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.
References
- http://tracker.firebirdsql.org/browse/CORE-1397
- firebird-unspecified-network-dos(36355) vdb-entry
- 25497 vdb-entry
- ADV-2007-3021 vdb-entry
- 26615 third-party-advisory
- http://www.firebirdsql.org/index.php?op=files&id=engine_202
- 29501 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=535898
- DSA-1529 vendor-advisory
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf