Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4822-1 advisory.

    It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this     vulnerability to cause a denial of service (crash) or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3929-1 advisory.

    It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could     possibly use this issue with a specially crafted network packet to cause Firebird to crash, resulting in a     denial of service. (CVE-2014-9323)

    It was discovered that Firebird incorrectly handled certain UDF libraries. A remote attacker could     possibly use this issue to execute arbitrary code. (CVE-2017-6369)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for firebird fixes the following security issues :

  - CVE-2017-6369: Insufficient checks in the UDF subsystem     in Firebird allowed remote authenticated users to     execute code by using a 'system' entrypoint from     fbudf.so (bsc#1023990).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

update to 2.5.7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Firebird SQL Server for Linux installed on the remote host is 2.5.x prior to 2.5.7 or 3.0.x prior to 3.0.2. It is, therefore, affected by a flaw in the UDF component due to insufficient restrictions on access to external functions by the symbols of the UDF library. An authenticated, remote attacker can exploit this issue, via a 'system' entry point from fbudf.so, to execute arbitrary code in the context of the Firebird server process.

George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions (UDF), thus allowing remote authenticated users to execute arbitrary code on the firebird server.

George Noseevich discovered that firebird2.5, a relational database system, did not properly check User-Defined Functions (UDF), thus allowing remote authenticated users to execute arbitrary code on the firebird server.

For Debian 7 'Wheezy', these problems have been fixed in version 2.5.2.26540.ds4-1~deb7u3.

We recommend that you upgrade your firebird2.5 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183550	Ubuntu 16.04 ESM : Firebird vulnerability (USN-4822-1)	Nessus	Ubuntu Local Security Checks	high
123675	Ubuntu 14.04 LTS : Firebird vulnerabilities (USN-3929-1)	Nessus	Ubuntu Local Security Checks	high
99980	SUSE SLED12 Security Update : firebird (SUSE-SU-2017:1156-1)	Nessus	SuSE Local Security Checks	high
99191	Fedora 24 : firebird (2017-97d7758431)	Nessus	Fedora Local Security Checks	high
99132	Firebird SQL Server for Linux 2.5.x < 2.5.7 / 3.0.x < 3.0.2 UDF Libraries RCE	Nessus	General	high
99047	Debian DSA-3824-1 : firebird2.5 - security update	Nessus	Debian Local Security Checks	high
99045	Debian DLA-879-1 : firebird2.5 security update	Nessus	Debian Local Security Checks	high
97449	Fedora 25 : firebird (2017-0fbbb732a3)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-6369

high

Tenable Plugins

high

high

high

high

high

high

high

high