CVE-2017-6369
24.03.2017, 10:59
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.Enginsight
| Vendor | Product | Version |
|---|---|---|
| firebirdsql | firebird | 2.5.1 |
| firebirdsql | firebird | 2.5.2 |
| firebirdsql | firebird | 2.5.3 |
| firebirdsql | firebird | 2.5.4 |
| firebirdsql | firebird | 2.5.5 |
| firebirdsql | firebird | 2.5.6 |
| firebirdsql | firebird | 3.0 |
| firebirdsql | firebird | 3.0.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firebird2.5 |
| ||||||||||||||||||||||||||||||
| firebird3.0 |
|
Common Weakness Enumeration
References