Approved changes feed: RSS · Atom

cpe:2.3:a:firebird:firebird:*:r5:*:*:*:*:*:*

part: a version: * update: r5

VendorFirebird (b35feb30-754f-54e1-8b1b-68b97dd1db86)
ProductFirebird (dcc45bb7-6ac0-55f9-8ebc-644ce3a28ba0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:Deb/ubuntu/firebird purl2cpe 2026-06-01 10:14:03.480102
pkg:deb/debian/firebird purl2cpe 2026-06-01 10:14:03.480101
pkg:github/firebirdsql/firebird purl2cpe 2026-06-01 10:14:03.480104
pkg:rpm/fedora/firebird purl2cpe 2026-06-01 10:14:03.480105
pkg:rpm/opensuse/firebird purl2cpe 2026-06-01 10:14:03.480106
pkg:sourceforge/firebird.mirror purl2cpe 2026-06-01 10:14:03.480108

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1880 vulnerable 2026-06-08 04:50:22.153991 Details available
The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC_PASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:40:59.388Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.