CVE-2003-0281

CVE-2003-0281 describes a buffer overflow vulnerability in Firebird 1.0.2 and earlier versions, as well as products utilizing the InterBase codebase. A local attacker can exploit this by providing a long INTERBASE environment variable when calling specific functions (gds_inet_server, gds_lock_mgr, or gds_drop), leading to arbitrary code execution. With a CVSS score of 4.6, this vulnerability requires local access and has low attack complexity, potentially resulting in partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog or Hot List, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.