CVE-2008-0387

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 45.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-01-29 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.

Affected products

FirebirdSQL firebird: through 1.0.3; from 1.5 before 1.5.6; from 2.0.0 before 2.0.4; 2.1.0 — fixed in 1.5.6, 2.0.4

How to fix

Upgrade to a fixed version: FirebirdSQL firebird 1.5.6, 2.0.4. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/29203
http://secunia.com/advisories/29501
http://security.gentoo.org/glsa/glsa-200803-02.xml
http://securityreason.com/securityalert/3580
http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800
http://tracker.firebirdsql.org/browse/CORE-1681
http://www.coresecurity.com/?action=item&id=2095
http://www.debian.org/security/2008/dsa-1529
http://www.securityfocus.com/archive/1/487173/100/0/threaded
http://www.securityfocus.com/bid/27403
https://exchange.xforce.ibmcloud.com/vulnerabilities/39996
http://secunia.com/advisories/29203

Get alerted when CVE-2008-0387 or the next vulnerability affects your stack