Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-2492.
PoCs published by Metasploit, including Metasploit module exploits/windows/misc/fb_cnct_group.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Firebird SQL Server (CVE-2013-2492) by sending a crafted CNCT packet to overwrite a pointer, leading to arbitrary code execution via a ROP chain that bypasses DEP.
Description
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.
Exploits (2)
This Metasploit module exploits a buffer overflow in Firebird SQL Server (CVE-2013-2492) by sending a crafted CNCT packet to overwrite a pointer, leading to arbitrary code execution via a ROP chain that bypasses DEP.
This Metasploit module exploits a buffer overflow in Firebird SQL Server via a crafted CNCT packet, allowing remote code execution through a ROP chain that bypasses DEP. The exploit leverages a stack pivot and existing memcpy calls to achieve arbitrary code execution.