SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2007-4669

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.0
Exploit Score: 8.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

BID-25497

SECUNIA-29501

DSA-1529

http://sourceforge.net/project/shownotes.php?release_id=535898

http://tracker.firebirdsql.org/browse/CORE-1148

http://www.firebirdsql.org/index.php?op=files&id=engine_202

http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf


30430



423868



247862



909



194603



282