GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2007-5243

Vulnerability from fkie_nvd - Published: 2007-10-06 17:17 - Updated: 2026-06-16 22:45
Severity
Summary
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
References
cve@mitre.orghttp://osvdb.org/38605
cve@mitre.orghttp://osvdb.org/38606
cve@mitre.orghttp://osvdb.org/38607
cve@mitre.orghttp://osvdb.org/38608
cve@mitre.orghttp://osvdb.org/38609
cve@mitre.orghttp://risesecurity.org/advisory/RISE-2007002/
cve@mitre.orghttp://risesecurity.org/blog/entry/3/
cve@mitre.orghttp://risesecurity.org/exploit/10/
cve@mitre.orghttp://risesecurity.org/exploit/12/
cve@mitre.orghttp://risesecurity.org/exploit/13/
cve@mitre.orghttp://risesecurity.org/exploit/14/Exploit
cve@mitre.orghttp://risesecurity.org/exploit/15/Exploit
cve@mitre.orghttp://risesecurity.org/exploit/9/Exploit
cve@mitre.orghttp://secunia.com/advisories/27058
cve@mitre.orghttp://www.securityfocus.com/bid/25917Exploit
cve@mitre.orghttp://www.securitytracker.com/id?1018772
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/3381
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/36956
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38605
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38606
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38607
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38608
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38609
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/advisory/RISE-2007002/
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/blog/entry/3/
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/10/
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/12/
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/13/
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/14/Exploit
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/15/Exploit
af854a3a-2127-422b-91ae-364da2661108http://risesecurity.org/exploit/9/Exploit
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/27058
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/25917Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018772
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/3381
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/36956
Impacted products
Vendor Product Version
borland_software interbase li_8.0.0.53
borland_software interbase li_8.0.0.54
borland_software interbase li_8.0.0.253
borland_software interbase wi-o6.0.1.6
borland_software interbase wi-o6.0.2.0
borland_software interbase wi-v5.1.1.680
borland_software interbase wi-v5.5.0.742
borland_software interbase wi-v6.0.0.627
borland_software interbase wi-v6.0.1.0
borland_software interbase wi-v6.0.1.6
borland_software interbase wi-v6.5.0.28
borland_software interbase wi-v7.0.1.1
borland_software interbase wi-v7.5.0.129
borland_software interbase wi-v7.5.1.80
borland_software interbase wi-v8.0.0.123
borland_software interbase wi_5.1.1.680
borland_software interbase wi_8.1.0.257
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:li_8.0.0.53:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ABE3AEC-7F64-4F08-9A72-80FB27A2098F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:li_8.0.0.54:*:*:*:*:*:*:*",
              "matchCriteriaId": "923EC354-2ECD-4E88-801C-B6DF1A8D36FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:li_8.0.0.253:*:*:*:*:*:*:*",
              "matchCriteriaId": "59E79CC9-901D-4672-B792-2831578A8E2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-o6.0.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "05D9F1B1-317B-485C-A4DC-990D7FAF415C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-o6.0.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CDFDA90-D411-4EBF-AD75-A7144CCD0E31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v5.1.1.680:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7CFA605-B81A-4F5D-B0DD-011855D22D2C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v5.5.0.742:*:*:*:*:*:*:*",
              "matchCriteriaId": "24DDABB7-7F79-4661-A169-36997CAC84DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v6.0.0.627:*:*:*:*:*:*:*",
              "matchCriteriaId": "9AD640BD-5008-4EB2-81C2-B1C630911ABB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v6.0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "62225C4F-314E-454E-A1D2-F3CEAFBA18EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v6.0.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7044E7E1-0B98-48D2-B230-122F62FD67A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v6.5.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A5BBF7F-EF91-45E4-A052-DF29DA09EA57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v7.0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6870F9A0-4804-4D6C-8FDC-D7247B69949D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v7.5.0.129:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B7F19E3-0E84-412D-9642-7E8BB23AE75B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v7.5.1.80:*:*:*:*:*:*:*",
              "matchCriteriaId": "D70BE93B-CC19-44B3-AFED-46A8BC317031",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi-v8.0.0.123:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3AC69EC-523B-4323-ADCC-3CC1D01730F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi_5.1.1.680:*:*:*:*:*:*:*",
              "matchCriteriaId": "83C962E2-08ED-4AE0-8D6B-D2E7D94331A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:interbase:wi_8.1.0.257:*:*:*:*:*:*:*",
              "matchCriteriaId": "320770C5-0EB2-4DA9-A3F6-08D557FCA7EE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples desbordamientos de b\u00fafer basados en pila en Borland InterBase LI 8.0.0.53 hasta 8.1.0.253, y WI 5.1.1.680 hasta 8.1.0.257, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante (1) una petici\u00f3n larga de anexi\u00f3n a servicio en el puerto TCP 3050 a las funciones (a) SVC_attach o (b) INET_connect, (2) una petici\u00f3n larga de creaci\u00f3n en el puerto TCP 3050 a las funciones (c) isc_create_database o (d) jrd8_create_database, (3) una petici\u00f3n de anexi\u00f3n larga en el puerto TCP 3050 a las funciones (e) isc_attach_database o (f) PWD_db_aliased, o vectores no especificados que involucran a las funciones (4) jrd8_attach_database o (5) expand_filename2."
    }
  ],
  "evaluatorComment": "More information about this vulnerability can be found at: \r\nhttp://www.securitytracker.com/alerts/2007/Oct/1018772.html",
  "id": "CVE-2007-5243",
  "lastModified": "2026-06-16T22:45:43.603",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-10-06T17:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38605"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38606"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38607"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38608"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38609"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://risesecurity.org/advisory/RISE-2007002/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://risesecurity.org/blog/entry/3/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://risesecurity.org/exploit/10/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://risesecurity.org/exploit/12/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://risesecurity.org/exploit/13/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/14/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/15/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/9/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27058"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25917"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018772"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/3381"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36956"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38605"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38606"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38607"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38608"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38609"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://risesecurity.org/advisory/RISE-2007002/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://risesecurity.org/blog/entry/3/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://risesecurity.org/exploit/10/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://risesecurity.org/exploit/12/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://risesecurity.org/exploit/13/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/14/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/15/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://risesecurity.org/exploit/9/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27058"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/25917"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018772"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3381"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36956"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.