Approved changes feed: RSS · Atom

cpe:2.3:a:firebird:firebird:2.0.3.12981.0:*:*:*:*:*:*:*

part: a version: 2.0.3.12981.0 update: *

VendorFirebird (b35feb30-754f-54e1-8b1b-68b97dd1db86)
ProductFirebird (dcc45bb7-6ac0-55f9-8ebc-644ce3a28ba0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:Deb/ubuntu/firebird purl2cpe 2026-06-01 10:14:03.475743
pkg:deb/debian/firebird purl2cpe 2026-06-01 10:14:03.475742
pkg:github/firebirdsql/firebird purl2cpe 2026-06-01 10:14:03.475745
pkg:rpm/fedora/firebird purl2cpe 2026-06-01 10:14:03.475746
pkg:rpm/opensuse/firebird purl2cpe 2026-06-01 10:14:03.475748
pkg:sourceforge/firebird.mirror purl2cpe 2026-06-01 10:14:03.475749

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1880 vulnerable 2026-06-08 04:50:22.154584 Details available
The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC_PASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:40:59.388Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.