CVE-2006-7211

fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.

Score

CVSS 2.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2007-06-29

Last modified

2024-08-07

Affected products

• Firebird (Firebirdsql)

References

• http://secunia.com/advisories/29501
• http://www.debian.org/security/2008/dsa-1529
• http://www.firebirdsql.org/rlsnotes/Firebird-2.0-ReleaseNotes.pdf
• http://www.securityfocus.com/bid/28474