CVE-2007-4664

N/A

Descricao

Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado9/4/2007

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

firebirdsql:firebird

Fraquezas (CWE)

CWE-20CWE-119

Referencias

http://secunia.com/advisories/26615(cve@mitre.org)

http://secunia.com/advisories/29501(cve@mitre.org)

http://sourceforge.net/project/shownotes.php?release_id=535898(cve@mitre.org)

http://tracker.firebirdsql.org/browse/CORE-1405(cve@mitre.org)

http://www.debian.org/security/2008/dsa-1529(cve@mitre.org)

http://www.firebirdsql.org/index.php?op=files&id=engine_202(cve@mitre.org)

http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/25497(cve@mitre.org)

http://www.vupen.com/english/advisories/2007/3021(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/36359(cve@mitre.org)

http://secunia.com/advisories/26615(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/29501(af854a3a-2127-422b-91ae-364da2661108)

http://sourceforge.net/project/shownotes.php?release_id=535898(af854a3a-2127-422b-91ae-364da2661108)

http://tracker.firebirdsql.org/browse/CORE-1405(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2008/dsa-1529(af854a3a-2127-422b-91ae-364da2661108)

http://www.firebirdsql.org/index.php?op=files&id=engine_202(af854a3a-2127-422b-91ae-364da2661108)

http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/25497(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/3021(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/36359(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.