CVE-2007-3566

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Borland Interbase - 'Create-Request' Remote Buffer Overflow (Metasploit)2010-06-15 · remote · windows · Verified

Impact

Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.

Affected products

References

• NVD record
• CVE.org record
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-13
• http://dvlabs.tippingpoint.com/blog/2007/07/24/step-by-step-of-how-tpti-07-013-was-discovered
• http://osvdb.org/38602
• http://secunia.com/advisories/26189
• http://securityreason.com/securityalert/2929
• http://www.codegear.com/downloads/regusers/interbase
• http://www.securityfocus.com/archive/1/474561/100/0/threaded
• http://www.securityfocus.com/bid/25048
• http://www.securitytracker.com/id?1018451
• http://www.vupen.com/english/advisories/2007/2642
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35574
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-13
• http://dvlabs.tippingpoint.com/blog/2007/07/24/step-by-step-of-how-tpti-07-013-was-discovered
• http://osvdb.org/38602
• http://secunia.com/advisories/26189
• http://securityreason.com/securityalert/2929
• http://www.codegear.com/downloads/regusers/interbase
• http://www.securityfocus.com/archive/1/474561/100/0/threaded
• http://www.securityfocus.com/bid/25048
• http://www.securitytracker.com/id?1018451
• http://www.vupen.com/english/advisories/2007/2642
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35574