Firebird fbudf Module Authenticated Remote Code Execution
Here is the description for CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL
Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. The
only known solution is to disable external UDF libraries from being loaded. In
order to achieve this, the default configuration has changed to UdfAccess=None.
This will prevent the fbudf module from being loaded, but may also break other
functionality relying on modules.
Here is the Debian security page with the issue : CVE-2017-11509
And here is the original report https://www.tenable.com/security/research/tra-2017-36



(2 votes, average: 4.00 out of 5)
Database .NET 24.8 is an innovative, powerful and intuitive multiple database management tool, With it you can easily edit and manage your Firebird database files.
dbMigration .NET 8.4 is a simple, easy and intuitive multiple database migration and data synchronization tool, With it you can easily migrate schema and data to Firebird and vice versa.