Locally exploitable stack overflow [CORE167]

[firebird-automations]

Submitted by: lthegler (lthegler)

SFID: 739480#⁠
Submitted By: lthegler

According to http://packetstormsecurity.nl/0305-
exploits/dsr-adv001.txt, firebird (at least versions 1.0.0
and 1.0.2) suffers from several locally exploitable stack
overflows:

<quote>
Firebird has 3 binarys [gds_inet_server, gds_drop, and
gds_lock_mgr], which all use insufficent bounds
checking in conjunction with getenv(), making each one
succeptable to local exploitation.
</qoute>

[firebird-automations]

Commented by: Alice F. Bird (firebirds)

Date: 2005-06-17 19:17
Sender: seanleyne
Logged In: YES
user_id=71163

Backported to 1.5.3 by Alex Peshkov

[firebird-automations]

Commented by: Alice F. Bird (firebirds)

Date: 2003-12-12 11:31
Sender: meirkr
Logged In: YES
user_id=538347

Hi, I'm firebird's maintainer in gentoo.

What's up with this security problem ? We have a bug about it open for a
long time, but no reslution yet.

It says it's fixed in gds.c 1.18, but looking at cvs, gds.c ver 1.19 says
the bogus fixed was rolled back.

Is a fix for firebird 1.0.3 available ?

[firebird-automations]

Commented by: Alice F. Bird (firebirds)

Date: 2003-06-14 16:10
Sender: seanleyne
Logged In: YES
user_id=71163

Chris Knight closed this entry by mistake. :-(

[firebird-automations]

Commented by: Alice F. Bird (firebirds)

Date: 2003-06-13 12:32
Sender: stryqx
Logged In: YES
user_id=65317

fixed in revision 1.18 of jrd/gds.c

[firebird-automations]

Modified by: @pcisar

Workflow: jira [ 10191 ] => Firebird [ 14409 ]

[firebird-automations]

Modified by: @pavel-zotov

QA Status: No test

[firebird-automations]

Modified by: @pavel-zotov

status: Closed [ 6 ] => Closed [ 6 ]

QA Status: No test => Cannot be tested