Login Request a demo
Unscored severity · published Jun 12, 2007
CVE-2007-3181
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect…
–
CVSS
13.2%
EPSS
No
On KEV
Description
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related to "an InterBase version of gds32.dll."
Exploitation
Is it being used?
Exploit prediction (EPSS)13.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebird · Firebirdsql
through 2.0.0 · source: NVD
NE
Netvault · Bakbone
6.x · source: NVD
Affected product
NE
Netvault
Bakbone
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3181
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3181
Vendor Advisory
http://dvlabs.tippingpoint.com/advisory/TPTI-07-11
osvdb.org
http://osvdb.org/37231
Patch
http://secunia.com/advisories/25601
secunia.com
http://secunia.com/advisories/25872
secunia.com
http://secunia.com/advisories/29501
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200707-01.xml
More from Netvault
–
CVE-2009-3448
npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large…
–
CVE-2005-1547
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port…
–
CVE-2005-1372
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu
–
CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based…