CVE-2007-5243
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to...
- Published
- Oct 6, 2007
- Updated
- Aug 7, 2024
- Assigning CNA
- mitre
- Evidence observed
- Oct 3, 2007
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:CModerate · next 30 days
- Percentile
- 98.6%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
Sources
modules/exploits/linux/misc/ib_inet_connect.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/misc/ib_inet_connect.platform)
- verification: check_not_declared($.exploit_linux/misc/ib_inet_connect.check)
modules/exploits/linux/misc/ib_jrd8_create_database.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/misc/ib_jrd8_create_database.platform)
- verification: check_not_declared($.exploit_linux/misc/ib_jrd8_create_database.check)
modules/exploits/linux/misc/ib_pwd_db_aliased.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux($.exploit_linux/misc/ib_pwd_db_aliased.platform)
- verification: check_not_declared($.exploit_linux/misc/ib_pwd_db_aliased.check)
modules/exploits/windows/misc/fb_isc_attach_database.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/fb_isc_attach_database.platform)
- verification: check_not_declared($.exploit_windows/misc/fb_isc_attach_database.check)
modules/exploits/windows/misc/fb_isc_create_database.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/fb_isc_create_database.platform)
- verification: check_not_declared($.exploit_windows/misc/fb_isc_create_database.check)
modules/exploits/windows/misc/fb_svc_attach.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/fb_svc_attach.platform)
- verification: check_not_declared($.exploit_windows/misc/fb_svc_attach.check)
modules/exploits/windows/misc/ib_isc_attach_database.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/ib_isc_attach_database.platform)
- verification: check_not_declared($.exploit_windows/misc/ib_isc_attach_database.check)
modules/exploits/windows/misc/ib_isc_create_database.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/ib_isc_create_database.platform)
- verification: check_not_declared($.exploit_windows/misc/ib_isc_create_database.check)
modules/exploits/windows/misc/ib_svc_attach.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/misc/ib_svc_attach.platform)
- verification: check_not_declared($.exploit_windows/misc/ib_svc_attach.check)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.