TUCoPS :: HP Unsorted F

TUCoPS :: HP Unsorted F :: tb12920.htm
Firebird process_packet() Remote Stack Overflow Vulnerability
ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
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