CVE-2008-0387

HIGH 7.8CVE-2008-0387 · Published 29/01/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
firebird firebirdsql	`= 2.1.0≥ 1.5, < 1.5.6≥ 2.0.0, < 2.0.4≤ 1.0.3`	`1.5.62.0.4`

Description

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

References

secunia.com/advisories/29203 · Third Party Advisory
secunia.com/advisories/29501 · Third Party Advisory
security.gentoo.org/glsa/glsa-200803-02.xml · Third Party Advisory
securityreason.com/securityalert/3580 · Third Party Advisory
sourceforge.net/project/shownotes.php · Third Party Advisory
tracker.firebirdsql.org/browse/CORE-1681 · Vendor Advisory
coresecurity.com · Third Party Advisory
debian.org/security/2008/dsa-1529 · Third Party Advisory
securityfocus.com/archive/1/487173/100/0/threaded · Third Party Advisory
securityfocus.com/bid/27403 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/39996 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free