CVE-2008-0387: firebirdsql firebird Numeric Errors

EPSS trend

Probability

45.87%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 45.87% on 21-09-2026

21-09-202621-10-2026

EPSS score

45.87%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotemultipleVerified
Firebird 2.0.3 Relational Database - 'protocol.cpp' XDR Protocol Remote Memory Corruption
Maturity: weaponized

References

11 links

security.gentoo.org/glsa/glsa-200803-02.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/29203Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/39996VDB EntryX Refsource XFThird Party Advisory
www.coresecurity.com?action=item&id=2095X Refsource MISCThird Party Advisory
sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/487173/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/29501Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/3580Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/27403VDB EntryX Refsource BIDThird Party Advisory
tracker.firebirdsql.org/browse/CORE-1681X Refsource CONFIRMVendor Advisory

Show all 11 references

www.debian.org/security/2008/dsa-1529Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Related vulnerabilities

CVE-2003-0281firebirdsqlfirebird1.01%23y ago14-05-2003 04:00Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.CVE-2003-0197borland_softwareinterbase+10.54%23y ago08-04-2003 04:00Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).CVE-2013-2492debianfirebird2.1+242.17%13y ago15-03-2013 14:00Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.CVE-2007-2606firebirdsqlfirebird1.79%19y ago11-05-2007 10:00Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.CVE-2007-4666firebirdsqlfirebird2.13%19y ago04-09-2007 22:00Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.CVE-2007-4665firebirdsqlfirebird2.13%19y ago04-09-2007 22:00Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.

All vulnerabilities infirebird

CVE-2008-0387: firebirdsql firebird Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References