CVE-2007-4669

CVSS V2 Medium 4 CVSS V3 None

Description

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.

Overview

CVE ID
CVE-2007-4669

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2007-09-04T22:17:00

Last Modified Date
2008-09-05T21:28:49

Weakness Enumerations

CWE	URL
CWE-264	http://cwe.mitre.org/data/definitions/264.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:firebirdsql:firebird::::::::	1	OR		2.0.1

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:S/C:P/I:N/A:N

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
SINGLE

Confidentiality Impact
PARTIAL

Integrity Impact
NONE

Availability Impact
NONE

Base Score
4

Severity
MEDIUM

Exploitability Score
8

Impact Score
2.9

References

Reference URL	Reference Tags
http://sourceforge.net/project/shownotes.php?release_id=535898
http://tracker.firebirdsql.org/browse/CORE-1148
http://www.firebirdsql.org/index.php?op=files&id=engine_202
http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
http://www.securityfocus.com/bid/25497	Patch
http://www.debian.org/security/2008/dsa-1529
http://secunia.com/advisories/29501

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2007-4669
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4669

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 11:24:08				Added to TrackCVE