[#CORE-2563] Possible DoS attack using the malformed packet sent into the connection port

Firebird Core

Possible DoS attack using the malformed packet sent into the connection port

Created: 20/Jul/09 07:31 AM Updated: 08/Nov/09 10:25 PM

Component/s:

Engine

Affects Version/s:

2.0.0, 1.5.4, 2.0.1, 2.0.2, 2.0.3, 1.5.5, 2.1.0, 2.0.4, 2.5 Alpha 1, 2.1.1, 2.0.5, 2.1.2, 2.5 Beta 1

Fix Version/s:

2.5 Beta 2, 2.1.3, 1.5.6, 2.0.6

Time Tracking:

Not Specified

Environment:

SuperServer only, any platform

Planning Status:

Unspecified

Description

« Hide

It's possible to shutdown the server's main port (3050 by default) via sending a malformed packet of some special format, thus causing a DoS condition for new incoming connections. This exploit can be used by an unauthenticated client. Reported 15-Jul-2009 by Core Security Technologies.

All

Comments

Work Log

Change History

Version Control

FishEye

Sort Order:

There are no comments yet on this issue.