Unscored severity · published Sep 4, 2007
CVE-2007-4668
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access,"…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebird · Firebirdsql
through 2.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4668
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4668
secunia.com
http://secunia.com/advisories/29501
Patch
http://sourceforge.net/project/shownotes.php?release_id=535898
tracker.firebirdsql.org
http://tracker.firebirdsql.org/browse/CORE-1312
www.debian.org
http://www.debian.org/security/2008/dsa-1529
www.firebirdsql.org
http://www.firebirdsql.org/index.php?op=files&id=engine_202
www.firebirdsql.org
http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
More from Firebird
9.9
CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
8.8
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
8.8
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
8.8
CVE-2017-6369
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
8.2
CVE-2026-28224
Firebird Null Pointer Dereference via CryptCallback causes DOS