Vulnerability Name:

CVE-2006-1240 (CCN-25282)

Assigned:2006-03-12
Published:2006-03-12
Updated:2018-10-18
Summary:Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.
CVSS v3 Severity:5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: Full-Disclosure Mailing List, Sun Mar 12 2006 - 09:56:07 CST
Buffer Overflow and Installation Script Error in Firebird 1.5.3

Source: MITRE
Type: CNA
CVE-2006-1240

Source: CCN
Type: Firebird Web page
Firebird - Relational Database for the New Millennium

Source: FULLDISC
Type: UNKNOWN
20060312 Buffer Overflow and Installation Script Error in Firebird 1.5.3

Source: CCN
Type: OSVDB ID: 24317
Firebird fbserver -p Parameter Local Overflow

Source: CCN
Type: OSVDB ID: 28267
Firebird Multiple Program Setuid Weakness

Source: CCN
Type: OSVDB ID: 41547
Firebird Multiple Unspecified Overflows

Source: CCN
Type: OSVDB ID: 41548
Firebird WNET Unspecified Overflows

Source: BUGTRAQ
Type: UNKNOWN
20060312 Buffer Overflow and Installation Script Error in Firebird 1.5.3

Source: BID
Type: Exploit, Patch
17077

Source: CCN
Type: BID-17077
Firebird Local Inet_Server Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
firebird-fbinetserver-fbserver-bo(25282)

Source: XF
Type: UNKNOWN
firebird-fbinetserver-fbserver-bo(25282)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:firebirdsql:firebird:1.5:*:*:*:*:*:*:*
  • OR cpe:/a:firebirdsql:firebird:1.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:firebirdsql:firebird:1.5.2:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:firebirdsql:firebird:1.5.2.4731:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    firebirdsql firebird 1.5
    firebirdsql firebird 1.5.1
    firebirdsql firebird 1.5.2
    firebirdsql firebird 1.5.2.4731