CVE-2008-1880: Medium severity gentoo linux vulnerability
The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISCPASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1880?
CVE-2008-1880 is classified as a critical vulnerability due to the potential for unauthorized access to sensitive database information.
How do I fix CVE-2008-1880?
To fix CVE-2008-1880, ensure that the ISC_PASSWORD environment variable is not set to an empty value before starting Firebird.
Which versions of Firebird are affected by CVE-2008-1880?
CVE-2008-1880 affects Firebird versions before 2.0.3.12981.0 on Gentoo Linux.
Can CVE-2008-1880 allow remote access to the database?
Yes, CVE-2008-1880 allows remote attackers to bypass SYSDBA authentication and access the database.
What operating system is specifically mentioned in relation to CVE-2008-1880?
CVE-2008-1880 specifically mentions Gentoo Linux as the affected operating system.