Description
Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.
References
- firebirdsql-processpacket-bo(37079) vdb-entry
- 1018802 vdb-entry
- 26011 vdb-entry
- GLSA-200712-06 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=195569
- http://www.zerodayinitiative.com/advisories/ZDI-07-057.html
- 27982 third-party-advisory
- 20071010 ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability mailing-list
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0.3-ReleaseNotes.pdf