CVE-2006-7211

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jun 29, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-72126.8Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overla CVE-2006-72135.5Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database.CVE-2006-72147.8Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending CVE-2006-72152.1The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory page Access (A) bit for CVE-2006-72164.0Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does CVE-2006-72174.0Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote auth CVE-2006-72184.0eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allow CVE-2006-72194.0eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to CVE-2006-72207.8Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain CVE-2006-72217.5Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving t CVE-2006-72226.8Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote CVE-2006-72236.5PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, whic