Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-2492 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Firebird

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
86.7%
top 0.58%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Firebirdsql Firebird
Timeline
PublishedMar 15
Latest updateMay 17

Description

Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDfirebirdsql/firebird6 versions+5

🔴Vulnerability Details

3
GHSA
GHSA-8xvr-8v4v-rm6j: Stack-based buffer overflow in Firebird 2↗2022-05-17
▶
CVEList
CVE-2013-2492: Stack-based buffer overflow in Firebird 2↗2013-03-15
▶
OSV
CVE-2013-2492: Stack-based buffer overflow in Firebird 2↗2013-03-15
▶

💥Exploits & PoCs

1
Exploit-DB
Firebird - Relational Database CNCT Group Number Buffer Overflow (Metasploit)↗2013-01-31
▶

💬Community

3
Bugzilla
CVE-2013-2492 Firebird: CNCT info remote stack buffer overflow [fedora-all]↗2013-03-08
▶
Bugzilla
CVE-2013-2492 Firebird: CNCT info remote stack buffer overflow [epel-all]↗2013-03-08
▶
Bugzilla
CVE-2013-2492 Firebird: CNCT info remote stack buffer overflow↗2013-03-08
▶
CVE-2013-2492 — Firebirdsql Firebird vulnerability | cvebase