Vulnerability Details CVE-2007-5244
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.763
EPSS Ranking 98.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/38610
- http://risesecurity.org/advisory/RISE-2007002/
- http://risesecurity.org/blog/entry/3/
- http://risesecurity.org/exploit/11/
- http://secunia.com/advisories/27058
- http://www.securityfocus.com/bid/25917
- http://www.securitytracker.com/id?1018772
- http://www.vupen.com/english/advisories/2007/3381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36956
- http://osvdb.org/38610
- http://risesecurity.org/advisory/RISE-2007002/
- http://risesecurity.org/blog/entry/3/
- http://risesecurity.org/exploit/11/
- http://secunia.com/advisories/27058
- http://www.securityfocus.com/bid/25917
- http://www.securitytracker.com/id?1018772
- http://www.vupen.com/english/advisories/2007/3381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36956
Products affected by CVE-2007-5244
-
cpe:2.3:a:borland_software:interbase:li_8.0.0.253
-
cpe:2.3:a:borland_software:interbase:li_8.0.0.53
-
cpe:2.3:a:borland_software:interbase:li_8.0.0.54