{"id":"CVE-2007-5243","aliases":["EUVD-2007-5223","GHSA-cm4p-rvrm-3xfj"],"status":"published","title":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI...","description":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.40062,"percentile":0.98641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-10-06T17:00:00Z","modified":"2026-06-16T22:45:43Z","exploits":[{"source":"exploitdb","id":"EDB-10020","title":"Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2007-10-03","verified":true,"url":"https://www.exploit-db.com/exploits/10020"},{"source":"exploitdb","id":"EDB-10021","title":"Borland Interbase 2007/2007 SP2 - 'INET_connect' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2007-10-03","verified":true,"url":"https://www.exploit-db.com/exploits/10021"},{"source":"exploitdb","id":"EDB-16420","title":"Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16420"},{"source":"exploitdb","id":"EDB-16432","title":"Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16432"},{"source":"exploitdb","id":"EDB-16437","title":"Borland Interbase - 'isc_create_database()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16437"},{"source":"exploitdb","id":"EDB-16440","title":"Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16440"},{"source":"exploitdb","id":"EDB-16447","title":"Borland Interbase - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16447"},{"source":"exploitdb","id":"EDB-16449","title":"Borland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16449"},{"source":"exploitdb","id":"EDB-16839","title":"Borland Interbase - 'PWD_db_aliased()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16839"},{"source":"exploitdb","id":"EDB-16843","title":"Borland Interbase - 'jrd8_create_database()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16843"},{"source":"exploitdb","id":"EDB-16844","title":"Borland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16844"},{"source":"exploitdb","id":"EDB-9954","title":"Borland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2007-10-03","verified":true,"url":"https://www.exploit-db.com/exploits/9954"},{"source":"metasploit","id":"exploit/linux/misc/ib_inet_connect","title":"Borland InterBase INET_connect() Buffer Overflow","type":"exploit","platform":"Linux","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/misc/ib_inet_connect"},{"source":"metasploit","id":"exploit/linux/misc/ib_jrd8_create_database","title":"Borland InterBase jrd8_create_database() Buffer Overflow","type":"exploit","platform":"Linux","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/misc/ib_jrd8_create_database"},{"source":"metasploit","id":"exploit/linux/misc/ib_pwd_db_aliased","title":"Borland InterBase PWD_db_aliased() Buffer Overflow","type":"exploit","platform":"Linux","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/misc/ib_pwd_db_aliased"},{"source":"metasploit","id":"exploit/windows/misc/fb_isc_attach_database","title":"Firebird Relational Database isc_attach_database() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/fb_isc_attach_database"},{"source":"metasploit","id":"exploit/windows/misc/fb_isc_create_database","title":"Firebird Relational Database isc_create_database() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/fb_isc_create_database"},{"source":"metasploit","id":"exploit/windows/misc/fb_svc_attach","title":"Firebird Relational Database SVC_attach() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/fb_svc_attach"},{"source":"metasploit","id":"exploit/windows/misc/ib_isc_attach_database","title":"Borland InterBase isc_attach_database() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/ib_isc_attach_database"},{"source":"metasploit","id":"exploit/windows/misc/ib_isc_create_database","title":"Borland InterBase isc_create_database() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/ib_isc_create_database"},{"source":"metasploit","id":"exploit/windows/misc/ib_svc_attach","title":"Borland InterBase SVC_attach() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/ib_svc_attach"}],"products":[{"vendor":"borland_software","product":"interbase"}],"references":[{"url":"http://www.securityfocus.com/bid/25917","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://risesecurity.org/blog/entry/3/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018772","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://risesecurity.org/exploit/10/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://risesecurity.org/exploit/9/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://osvdb.org/38607","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38609","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://risesecurity.org/exploit/13/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3381","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://osvdb.org/38606","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36956","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://risesecurity.org/exploit/15/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://osvdb.org/38608","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://risesecurity.org/advisory/RISE-2007002/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://risesecurity.org/exploit/14/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/27058","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://risesecurity.org/exploit/12/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://osvdb.org/38605","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5243"},{"url":"http://risesecurity.org/advisory/RISE-2007002"},{"url":"http://risesecurity.org/blog/entry/3"},{"url":"http://risesecurity.org/exploit/10"},{"url":"http://risesecurity.org/exploit/12"},{"url":"http://risesecurity.org/exploit/13"},{"url":"http://risesecurity.org/exploit/14"},{"url":"http://risesecurity.org/exploit/15"},{"url":"http://risesecurity.org/exploit/9"},{"url":"https://github.com/advisories/GHSA-cm4p-rvrm-3xfj"}],"sources":{"cve":[{"id":"CVE-2007-5243","description":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.","status":"published","published":"2007-10-06T17:00:00Z","modified":"2024-08-07T15:24:42.138Z","updated_at":"2026-11-02T13:32:00.617893Z"}],"euvd":[{"id":"EUVD-2007-5223","description":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.","status":"published","published":"2007-10-06T17:00:00Z","modified":"2024-08-07T15:24:42Z","updated_at":"2026-11-03T01:16:18.260819Z"}],"ghsa":[{"id":"GHSA-cm4p-rvrm-3xfj","title":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI...","description":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.","status":"published","published":"2022-05-01T18:31:29Z","modified":"2025-04-09T03:46:59Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:00:55.004058Z"}],"nvd":[{"id":"CVE-2007-5243","description":"Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.","status":"published","published":"2007-10-06T17:17:00Z","modified":"2026-06-16T22:45:43.603Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:21.141213Z"}]}}