CVE-2003-0281
Firebird < 1.5 - Buffer Overflow via Long INTERBASE Environment Variable
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2003-0281. PoCs published by bob, stripey.
AI-analyzed exploit summary This is a local buffer overflow exploit for Firebird 1.0.2 on FreeBSD 4.7, targeting the INTERBASE environment variable. It includes shellcode for setuid, bindshell, and execve payloads, depending on the selected target binary.
Description
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Exploits (3)
This is a local buffer overflow exploit for Firebird 1.0.2 on FreeBSD 4.7, targeting the INTERBASE environment variable. It includes shellcode for setuid, bindshell, and execve payloads, depending on the selected target binary.
This exploit targets a buffer overflow vulnerability in Interbase/Firebird's gds_drop, gds_lock_mgr, and gds_inet_server programs. It leverages environment variable manipulation to overwrite stack memory and execute arbitrary shellcode for local privilege escalation.
This exploit targets a buffer overflow in the gds_drop program of Interbase 6.0 Linux beta. It uses a crafted environment variable to overwrite stack memory and execute arbitrary shellcode, leading to local privilege escalation.