CVE-2003-0281 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 62)
Patch early
A public exploit exists.
Description
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.01% — more likely to be exploited than 62% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-06-16 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| firebirdsql | firebird |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation | 2003-05-12 |
| exploit-db | Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (2) | 2002-06-18 |
| exploit-db | Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1) | 2002-06-15 |
References
- http://marc.info/?l=bugtraq&m=105259012802997&w=2
- http://seclists.org/lists/bugtraq/2002/Jun/0212.html
- http://secunia.com/advisories/8758
- http://security.gentoo.org/glsa/glsa-200405-18.xml
- http://www.securityfocus.com/bid/7546
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11977
- http://marc.info/?l=bugtraq&m=105259012802997&w=2
- http://seclists.org/lists/bugtraq/2002/Jun/0212.html
- http://secunia.com/advisories/8758
- http://security.gentoo.org/glsa/glsa-200405-18.xml
- http://www.securityfocus.com/bid/7546
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11977
→ the Explorer · watch your stack · NVD