What’s Vulnerable › Vulnerabilities

CVE-2007-4669

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-09-04 · updated 2026-06-16
• Weakness: CWE-200

Description

The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.

Affected products

• FirebirdSQL firebird: through 2.0.1

References

• http://secunia.com/advisories/29501
• http://sourceforge.net/project/shownotes.php?release_id=535898
• http://tracker.firebirdsql.org/browse/CORE-1148
• http://www.debian.org/security/2008/dsa-1529
• http://www.firebirdsql.org/index.php?op=files&id=engine_202
• http://www.firebirdsql.org/rlsnotes/Firebird-2.0.2-ReleaseNotes.pdf
• http://www.securityfocus.com/bid/25497
• http://secunia.com/advisories/29501
• http://sourceforge.net/project/shownotes.php?release_id=535898
• http://tracker.firebirdsql.org/browse/CORE-1148
• http://www.debian.org/security/2008/dsa-1529
• http://www.firebirdsql.org/index.php?op=files&id=engine_202

Get alerted when CVE-2007-4669 or the next vulnerability affects your stack