CVE-2003-0281: firebirdsql firebird

EPSS trend

Probability

1.01%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

0.00 pp

From 1.01% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.01%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaselocalbsdVerified
Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation
Maturity: weaponized
exploit-databaselocalunixVerified
Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1)
Maturity: weaponized
exploit-databaselocalunixVerified
Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (2)
Maturity: weaponized

References

6 links

exchange.xforce.ibmcloud.com/vulnerabilities/11977VDB EntryX Refsource XF
security.gentoo.org/glsa/glsa-200405-18.xmlVendor AdvisoryX Refsource GENTOO
seclists.org/lists/bugtraq/2002/Jun/0212.htmlMailing ListX Refsource BUGTRAQ
marc.info?l=bugtraq&m=105259012802997&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/7546VDB EntryX Refsource BID
secunia.com/advisories/8758Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2003-0197borland_softwareinterbase+10.54%23y ago08-04-2003 04:00Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).CVE-2013-2492debianfirebird2.1+242.17%13y ago15-03-2013 14:00Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.CVE-2007-2606firebirdsqlfirebird1.79%19y ago11-05-2007 10:00Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.CVE-2007-4666firebirdsqlfirebird2.13%19y ago04-09-2007 22:00Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.CVE-2007-4665firebirdsqlfirebird2.13%19y ago04-09-2007 22:00Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.CVE-2007-4668firebirdsqlfirebird1.55%19y ago04-09-2007 22:00Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.

All vulnerabilities infirebird

CVE-2003-0281: firebirdsql firebird

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References