---------------------------------------------------------------------- BETA test the new Secunia Personal Software Inspector! The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors. Download the free PSI BETA from the Secunia website: https://psi.secunia.com/ ---------------------------------------------------------------------- TITLE: Firebird Multiple Vulnerabilities SECUNIA ADVISORY ID: SA26615 VERIFY ADVISORY: http://secunia.com/advisories/26615/ CRITICAL: Less critical IMPACT: Unknown, DoS WHERE: >From local network SOFTWARE: Firebird 1.x http://secunia.com/product/1449/ Firebird 2.x http://secunia.com/product/11516/ DESCRIPTION: Some vulnerabilities have been reported in Firebird, where some have unknown impact and others can be exploited by malicious users to cause a DoS (Denial of Service). 1) An error exists in the processing of event registration requests. This can potentially be exploited by a client application connected via XNET to crash the Firebird server by registering several events in parallel. 2) An error exists in the processing of network packets. This can potentially be exploited to increase the CPU load to a high value and consume large amounts of memory by sending large network packets containing garbage data. 3) An unspecified error exists in the processing of Service API calls. This can be exploited to cause a DoS on the affected Firebird server. 4) An unspecified vulnerability with unknown impact exists in the processing of "attach database" and "create database" commands when the passed filename is larger than "MAX_PATH_LEN". The vulnerabilities are reported in versions prior to 2.0.2. SOLUTION: Update to version 2.0.2. http://www.firebirdsql.org/index.php?op=files&id=engine_202 PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: http://sourceforge.net/project/shownotes.php?release_id=535898 1) http://tracker.firebirdsql.org/browse/CORE-1403 2) http://tracker.firebirdsql.org/browse/CORE-1397 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------