CVE-2017-6369
EUVD-2017-1543024.03.2017, 10:59
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| firebirdsql | firebird | 2.5.0 ≤ 𝑥 < 2.5.7 |
| firebirdsql | firebird | 3.0.0 ≤ 𝑥 < 3.0.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firebird2.5 |
| ||||||||||||||||||||||||||||||
| firebird3.0 |
|
Common Weakness Enumeration
References