Unscored severity · published Jun 16, 2003
CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a…
–
CVSS
1%
EPSS
No
On KEV
Description
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebird · Firebirdsql
1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0281
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0281
marc.info
http://marc.info/?l=bugtraq&m=105259012802997&w=2
seclists.org
http://seclists.org/lists/bugtraq/2002/Jun/0212.html
secunia.com
http://secunia.com/advisories/8758
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200405-18.xml
www.securityfocus.com
http://www.securityfocus.com/bid/7546
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11977
More from Firebird
9.9
CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
8.8
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
8.8
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
8.8
CVE-2017-6369
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
8.2
CVE-2026-28224
Firebird Null Pointer Dereference via CryptCallback causes DOS