CVE-2006-1240

Description

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.

Affected products

• FirebirdSQL / firebird1.5 – 1.5
• FirebirdSQL / firebird1.5.1 – 1.5.1
• FirebirdSQL / firebird1.5.2 – 1.5.2

References

• MISChttp://www.securityfocus.com/archive/1/427480/100/0/threaded
• MISChttp://www.securityfocus.com/bid/17077
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/25282
• MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html