CVE-2009-2620
Firebird SQL 1.5-1.5.5, 2.0-2.0.5, 2.1-2.1.2, 2.5 Beta 1 - Denial of Service via Malformed op_connect_request Message
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-2620. PoCs published by Core Security.
AI-analyzed exploit summary This is a detailed advisory and technical analysis of CVE-2009-2620, a denial of service vulnerability in Firebird SQL. The vulnerability allows a remote attacker to shut down the main listener socket by sending an unexpected 'op_connect_request' message with invalid data.
Description
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op_connect_request message that triggers an infinite loop or NULL pointer dereference.
Exploits (1)
This is a detailed advisory and technical analysis of CVE-2009-2620, a denial of service vulnerability in Firebird SQL. The vulnerability allows a remote attacker to shut down the main listener socket by sending an unexpected 'op_connect_request' message with invalid data.