[Git][security-tracker-team/security-tracker][master] CVE-2017-11509/firebird3.0: add bug reference

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
07a09e7d by Sylvain Beucler at 2021-11-18T17:05:19+01:00
CVE-2017-11509/firebird3.0: add bug reference

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -272715,10 +272715,11 @@ CVE-2017-11509 (An authenticated remote attacker can execute arbitrary code in F
 	[stretch] - firebird3.0 <postponed> (Minor issue, can be fixed along in a future update)
 	- firebird2.5 <removed>
 	NOTE: https://www.tenable.com/security/research/tra-2017-36
+	NOTE: https://github.com/FirebirdSQL/firebird/issues/5787
 	NOTE: Firebird upstream responded to Tenable the issue is not intended to be addressed
 	NOTE: in "any current release".
 	NOTE: Issue adressed by disabling UDFs in firebird.conf, this is not a source code fix,
-	NOTE: and might actually be considered more justof a mitigation.
+	NOTE: and might actually be considered more of just a mitigation.
 	NOTE: Steps to reproduce (partly) in: https://lists.debian.org/874lk9wyz5.fsf@curie.anarc.at
 CVE-2017-11508 (SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection ...)
 	NOT-FOR-US: SecurityCenter



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07a09e7db96d2d1d336ad221c5354d4daae8fc1e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07a09e7db96d2d1d336ad221c5354d4daae8fc1e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211118/9a1ea4cf/attachment.htm>