Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
07a09e7d by Sylvain Beucler at 2021-11-18T17:05:19+01:00
CVE-2017-11509/firebird3.0: add bug reference
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -272715,10 +272715,11 @@ CVE-2017-11509 (An authenticated remote attacker
can execute arbitrary code in F
[stretch] - firebird3.0 <postponed> (Minor issue, can be fixed along in
a future update)
- firebird2.5 <removed>
NOTE: https://www.tenable.com/security/research/tra-2017-36
+ NOTE: https://github.com/FirebirdSQL/firebird/issues/5787
NOTE: Firebird upstream responded to Tenable the issue is not intended
to be addressed
NOTE: in "any current release".
NOTE: Issue adressed by disabling UDFs in firebird.conf, this is not a
source code fix,
- NOTE: and might actually be considered more justof a mitigation.
+ NOTE: and might actually be considered more of just a mitigation.
NOTE: Steps to reproduce (partly) in:
https://lists.debian.org/[email protected]
CVE-2017-11508 (SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL
Injection ...)
NOT-FOR-US: SecurityCenter
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07a09e7db96d2d1d336ad221c5354d4daae8fc1e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07a09e7db96d2d1d336ad221c5354d4daae8fc1e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
