Vulnerabilidades

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.

Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors.

Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.

Desbordamiento de búfer en Firebird 1.0.2 permite que usuarios locales ejecuten comandos arbitrarios mediante una variable INTERBASE larga cuando se llama a (1) gds_inet_server, (2) gds_lock_mgr, o (3) gds_drop.

Desbordamiento de búfer gds_lock_mgr de Interbase Database 6.x permite a usuarios locales la obtención de privilegios mediante una variable de entorno ISC_LOCK_ENV larga. (INTERBASE_LOCK).

Vulnerabilidad de atravesamiento de directorios en WebServer 4 Everyone 1.22 permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una URL.

Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.

Desbordamiento de búfer en RadioBird Software Webserver 4 Everyone 1.23 y 1.27, y otras versiones anteriores a 1.30, permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición HTTP GET larga.

Vulnerabilidad de atravesamiento de directorios en RadioBird Software WebServer 4 Everyone 1.23 y 1.27, y otras versiones anteriores a la 1.30, permite a atacantes remotos leer ficheros arbitrarios mediante una petición HTTP con secuencias ".." (punto punto) conteniendo caracteres de barra invertida () codificada en…

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.