QwikSec

Security Database

CVE

CWE

Training

CVE-2013-2492

Published: Mar 15, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

https://gist.github.com/zeroSteiner/85daef257831d904479c

x_refsource_MISC

openSUSE-SU-2013:0496

vendor-advisory

x_refsource_SUSE

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_cnct_group.rb

x_refsource_MISC

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_DEBIAN

http://tracker.firebirdsql.org/browse/CORE-4058

x_refsource_CONFIRM

openSUSE-SU-2013:0504

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.