CVE-2017-11509

Name of the Vulnerable Software and Affected Versions Firebird SQL Server versions 2.5.7 and 3.0.2

Description The issue allows an authenticated remote attacker to execute arbitrary code by executing a malformed SQL statement. This is due to a lack of protection measures for the SQL query structure. The exploitation of this issue can enable a remote attacker to execute arbitrary code.

Recommendations For Firebird SQL Server version 2.5.7, update to a version that includes a fix for this issue. For Firebird SQL Server version 3.0.2, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the execution of complex SQL statements until a patch is available.