CVE ID:	CVE-2008-0387
Description:	Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3) op_start_and_receive, (4) op_send, (5) op_start_and_send, and (6) op_start_send_and_receive XDR requests, which triggers memory corruption.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0387 BugTraq ID: 27403 http://www.securityfocus.com/bid/27403 Bugtraq: 20080128 CORE-2007-1219: Firebird Remote Memory Corruption (Google Search) http://www.securityfocus.com/archive/1/487173/100/0/threaded Debian Security Information: DSA-1529 (Google Search) http://www.debian.org/security/2008/dsa-1529 http://security.gentoo.org/glsa/glsa-200803-02.xml http://www.coresecurity.com/?action=item&id=2095 http://secunia.com/advisories/29203 http://secunia.com/advisories/29501 http://securityreason.com/securityalert/3580 XForce ISS Database: firebird-xdrprotocol-integer-overflow(39996) https://exchange.xforce.ibmcloud.com/vulnerabilities/39996