Bug 52395 - databases/firebird* vulnerabilities
Summary: databases/firebird* vulnerabilities
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Alexander Leidinger
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-05-18 16:40 UTC by Lars Thegler
Modified: 2003-06-10 11:04 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Lars Thegler 2003-05-18 16:40:13 UTC 
According to http://packetstormsecurity.nl/0305-exploits/dsr-adv001.txt, 
databases/firebird (version 1.0.2.908) and databases/firebird-devel
(1.0.0-RC2) both suffer from locally exploitable stack overflows.

Fix: 

Mark both ports

FORBIDDEN=	Local Stack Overflow, see http://packetstormsecurity.nl/0305-exploits/dsr-adv001.txt
Comment 1 Alexander Leidinger freebsd_committer freebsd_triage 2003-06-10 11:04:13 UTC 
State Changed
From-To: open->closed

Commited, thanks.
Comment 2 Alexander Leidinger freebsd_committer freebsd_triage 2003-06-10 11:04:13 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->netchild

Commited, thanks.