Detections
Analytics
CVE-2008-0387
critical
Description
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/39996
http://www.securityfocus.com/bid/27403
http://www.securityfocus.com/archive/1/487173/100/0/threaded
http://www.debian.org/security/2008/dsa-1529
http://www.coresecurity.com/?action=item&id=2095
http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800
http://securityreason.com/securityalert/3580
http://security.gentoo.org/glsa/glsa-200803-02.xml