{"id":"CVE-2007-5244","aliases":["EUVD-2007-5224","GHSA-9q4h-3qxr-p642"],"status":"published","title":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and...","description":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.37503,"percentile":0.98541,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-10-06T17:00:00Z","modified":"2026-06-16T22:45:43Z","exploits":[{"source":"exploitdb","id":"EDB-10019","title":"Borland Interbase 2007/2007 SP2 - 'open_marker_file' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2007-10-03","verified":true,"url":"https://www.exploit-db.com/exploits/10019"},{"source":"exploitdb","id":"EDB-16840","title":"Borland Interbase - 'open_marker_file()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"linux","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16840"},{"source":"metasploit","id":"exploit/linux/misc/ib_open_marker_file","title":"Borland InterBase open_marker_file() Buffer Overflow","type":"exploit","platform":"Linux","date":"2007-10-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/misc/ib_open_marker_file"}],"products":[{"vendor":"borland_software","product":"interbase"}],"references":[{"url":"http://www.securityfocus.com/bid/25917","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://risesecurity.org/blog/entry/3/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securitytracker.com/id?1018772","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/3381","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36956","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/38610","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://risesecurity.org/advisory/RISE-2007002/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://risesecurity.org/exploit/11/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/27058","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5244"},{"url":"http://risesecurity.org/advisory/RISE-2007002"},{"url":"http://risesecurity.org/blog/entry/3"},{"url":"http://risesecurity.org/exploit/11"},{"url":"https://github.com/advisories/GHSA-9q4h-3qxr-p642"}],"sources":{"cve":[{"id":"CVE-2007-5244","description":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.","status":"published","published":"2007-10-06T17:00:00Z","modified":"2024-08-07T15:24:42.165Z","updated_at":"2026-11-02T13:32:11.910312Z"}],"euvd":[{"id":"EUVD-2007-5224","description":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.","status":"published","published":"2007-10-06T17:00:00Z","modified":"2024-08-07T15:24:42Z","updated_at":"2026-11-03T01:16:18.260819Z"}],"ghsa":[{"id":"GHSA-9q4h-3qxr-p642","title":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and...","description":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.","status":"published","published":"2022-05-01T18:31:29Z","modified":"2025-04-09T03:48:02Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:00:55.503486Z"}],"nvd":[{"id":"CVE-2007-5244","description":"Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.","status":"published","published":"2007-10-06T17:17:00Z","modified":"2026-06-16T22:45:43.77Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:21.141213Z"}]}}