CVE-2007-3181

2007-06-1223:30:00

mitre

web.nvd.nist.gov

cve

buffer overflow

firebird sql

remote attack

arbitrary code

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.323

Percentile

97.1%

JSON

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to “an InterBase version of gds32.dll.”

Affected configurations

Nvd

Node

bakbonenetvaultMatch6.x

firebirdsqlfirebirdRange≤2.0.0

VendorProductVersionCPE
bakbonenetvault6.xcpe:2.3:a:bakbone:netvault:6.x:*:*:*:*:*:*:*
firebirdsqlfirebird*cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*