← back
CVE-2009-2620

CVE-2009-2620

EPSS 8.6%
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/9295unverifiedexploitdbwww.exploit-db.com/exploits/9295unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.redhat.com/show_bug.cgi?id=514463https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01341.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-August/msg01370.htmlhttp://tracker.firebirdsql.org/browse/CORE-2563http://www.coresecurity.com/content/firebird-sql-doshttp://www.exploit-db.com/exploits/9295http://www.securityfocus.com/bid/35842