----------------------------------------------------------------------

BETA test the new Secunia Personal Software Inspector!

The Secunia PSI detects installed software on your computer and
categorises it as either Insecure, End-of-Life, or Up-To-Date.
Effectively enabling you to focus your attention on software
installations where more secure versions are available from the
vendors.

Download the free PSI BETA from the Secunia website:
https://psi.secunia.com/

----------------------------------------------------------------------

TITLE:
Firebird Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA26615

VERIFY ADVISORY:
http://secunia.com/advisories/26615/

CRITICAL:
Less critical

IMPACT:
Unknown, DoS

WHERE:
>From local network

SOFTWARE:
Firebird 1.x
http://secunia.com/product/1449/
Firebird 2.x
http://secunia.com/product/11516/

DESCRIPTION:
Some vulnerabilities have been reported in Firebird, where some have
unknown impact and others can be exploited by malicious users to
cause a DoS (Denial of Service).

1) An error exists in the processing of event registration requests.
This can potentially be exploited by a client application connected
via XNET to crash the Firebird server by registering several events
in parallel. 

2) An error exists in the processing of network packets. This can
potentially be exploited to increase the CPU load to a high value and
consume large amounts of memory by sending large network packets
containing garbage data.

3) An unspecified error exists in the processing of Service API
calls. This can be exploited to cause a DoS on the affected Firebird
server.  

4) An unspecified vulnerability with unknown impact exists in the
processing of "attach database" and "create database" commands when
the passed filename is larger than "MAX_PATH_LEN".
   
The vulnerabilities are reported in versions prior to 2.0.2.

SOLUTION:
Update to version 2.0.2.
http://www.firebirdsql.org/index.php?op=files&id=engine_202

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sourceforge.net/project/shownotes.php?release_id=535898
1) http://tracker.firebirdsql.org/browse/CORE-1403
2) http://tracker.firebirdsql.org/browse/CORE-1397

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------