Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-2620

src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.

Published

2009-07-29T17:30:01.280

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application firebirdsql firebird ≤ 2.0.3 Yes
Application firebirdsql firebird 1.5 Yes
Application firebirdsql firebird 1.5.1 Yes
Application firebirdsql firebird 1.5.2 Yes
Application firebirdsql firebird 1.5.2.4731 Yes
Application firebirdsql firebird 1.5.3.4870 Yes
Application firebirdsql firebird 1.5.4.4910 Yes
Application firebirdsql firebird 1.5.5 Yes
Application firebirdsql firebird 2.0.0 Yes
Application firebirdsql firebird 2.0.0.12748 Yes
Application firebirdsql firebird 2.0.1 Yes
Application firebirdsql firebird 2.0.2 Yes
Application firebirdsql firebird 2.1 Yes
Application firebirdsql firebird 2.1.2 Yes
Application firebirdsql firebird 2.1.3 Yes
Application firebirdsql firebird 2.5 Yes
Application firebirdsql firebird 2.5 Yes
References