Firebird拒绝服务和信息泄漏漏洞

BUGTRAQ ID: 30229 CNCAN ID：CNCAN-2008071607 Firebird是一款流行的数据库程序。 Firebird存在多个安全问题，远程攻击者可以利用漏洞使应用程序崩溃，内存破坏及获得敏感信息。 -部分标准调用会显示服务器安装目录给普通用户。 -新建立数据时使用不正确的访问权限，可导致普通用户可访问。 -EXECUTE STATEMENT存在两个内存破坏问题，可导致服务程序崩溃，其中一个问题存在于64-bit系统平台中。 -如果表达式用于输入参数所需空间的默认值，在请求不纯的区间，可导致覆盖其他内存。 Firebird Firebird 2.1 Firebird Firebird 2.0.4 Firebird Firebird 2.0.3 Firebird Firebird 2.0.2 Firebird Firebird 2.0.1 Firebird Firebird 1.5.4 Firebird Firebird 1.0.3 + FreeBSD FreeBSD 4.8 + FreeBSD FreeBSD 4.7 + FreeBSD FreeBSD 4.6 Firebird Firebird 2.1.0 RC1 Firebird Firebird 2.1 Beta 2 Firebird Firebird 2.1 Beta 1 Firebird Firebird 2.1 Alpha 1 Firebird Firebird 2.0 升级程序： Firebird Firebird 2.0 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.1 Beta 1 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird 2.1 Alpha 1 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird 2.1 Beta 2 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird 2.1.0 RC1 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird 1.0.3 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.0.1 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.0.2 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.0.3 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.0.4 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1 Firebird Firebird 2.1 Firebird Firebird-2.1.1.17910-0.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.1.1.17910-0.tar.b</a> z2?modtime=1216050454&amp;big_mirror=1 Firebird Firebird-2.5.0.20343-Alpha1.tar.bz2 <a href=http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1. target=_blank>http://downloads.sourceforge.net/firebird/Firebird-2.5.0.20343-Alpha1.</a> tar.bz2?modtime=1215944136&amp;big_mirror=1