The Services API in Firebird prior to 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
firebirdsql firebird