CVE-2003-0281 Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environm...
MediumCVSS 4.6
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| firebirdsql firebird | = 1.0.2 | No fix listed |
References
- 20030509 Firebird Local exploit mailing-list
- 20020617 Interbase 6.0 malloc() issues mailing-list
- 8758 third-party-advisory
- GLSA-200405-18 vendor-advisory
- 7546 vdb-entry
- firebird-interbase-bo(11977) vdb-entry