critical9.3Public exploit code
CVE-2007-5244
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Borland Interbase - 'open_marker_file()' Remote Buffer Overflow (Metasploit)2010-07-03 · remote · linux · Verified
- Borland Interbase 2007/2007 SP2 - 'open_marker_file' Remote Buffer Overflow (Metasploit)2007-10-03 · remote · linux · Verified
Impact
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Borland Software | Interbase | Versions li_8.0.0.53, li_8.0.0.54, li_8.0.0.253 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38610
- http://risesecurity.org/advisory/RISE-2007002/
- http://risesecurity.org/blog/entry/3/
- http://risesecurity.org/exploit/11/
- http://secunia.com/advisories/27058
- http://www.securityfocus.com/bid/25917
- http://www.securitytracker.com/id?1018772
- http://www.vupen.com/english/advisories/2007/3381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36956
- http://osvdb.org/38610
- http://risesecurity.org/advisory/RISE-2007002/
- http://risesecurity.org/blog/entry/3/
- http://risesecurity.org/exploit/11/
- http://secunia.com/advisories/27058
- http://www.securityfocus.com/bid/25917
- http://www.securitytracker.com/id?1018772
- http://www.vupen.com/english/advisories/2007/3381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36956