9.3

CVE-2007-5243: borland_software interbase

CVSS: 9.3v2.0HighModified
Published 06-10-2007Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2007-5243 is a high (CVSS 9.3) vulnerability in borland_software interbase. EPSS estimates a 40.06% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 25 public exploits are recorded.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.3/10
010
High · v2.0 (NVD)
EPSS score
40.06%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits25reference, exploit-database, metasploit

Timeline

  1. 06-10-2007
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

40.06%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 40.06% on 20-09-2026

20-09-202620-10-2026
EPSS score
40.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

25 found
  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (risesecurity.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (risesecurity.org)

    Maturity: unknown

Show all 25 exploits
  • referenceUnverified

    Exploit Reference (risesecurity.org)

    Maturity: unknown

  • exploit-databaseremotelinuxVerified

    Borland Interbase - 'INET_connect()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Borland Interbase - 'jrd8_create_database()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Borland Interbase - 'PWD_db_aliased()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Borland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Borland Interbase 2007/2007 SP2 - 'INET_connect' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Borland Interbase - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Borland Interbase - 'isc_create_database()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Borland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Firebird Relational Database - 'isc_create_database()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotewindowsVerified

    Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Borland InterBase INET_connect() Buffer Overflow

    exploit/linux/misc/ib_inet_connect

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Borland InterBase jrd8_create_database() Buffer Overflow

    exploit/linux/misc/ib_jrd8_create_database

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Borland InterBase PWD_db_aliased() Buffer Overflow

    exploit/linux/misc/ib_pwd_db_aliased

    Maturity: weaponized

  • MetasploitMetasploitremoteUnverified

    Firebird Relational Database isc_attach_database() Buffer Overflow

    exploit/windows/misc/fb_isc_attach_database

    Maturity: poc

  • MetasploitMetasploitremoteUnverified

    Firebird Relational Database isc_create_database() Buffer Overflow

    exploit/windows/misc/fb_isc_create_database

    Maturity: poc

  • MetasploitMetasploitremoteUnverified

    Firebird Relational Database SVC_attach() Buffer Overflow

    exploit/windows/misc/fb_svc_attach

    Maturity: poc

  • MetasploitMetasploitremoteVerified

    Borland InterBase isc_attach_database() Buffer Overflow

    exploit/windows/misc/ib_isc_attach_database

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Borland InterBase isc_create_database() Buffer Overflow

    exploit/windows/misc/ib_isc_create_database

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Borland InterBase SVC_attach() Buffer Overflow

    exploit/windows/misc/ib_svc_attach

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Borland_software1 product
  • interbaseli_8.0.0.53 | li_8.0.0.54 | li_8.0.0.253 | wi-o6.0.1.6 | wi-o6.0.2.0 | wi-v5.1.1.680 | wi-v5.5.0.742 | wi-v6.0.0.627 | wi-v6.0.1.0 | wi-v6.0.1.6 | wi-v6.5.0.28 | wi-v7.0.1.1 | wi-v7.5.0.129 | wi-v7.5.1.80 | wi-v8.0.0.123 | wi_5.1.1.680 | wi_8.1.0.257

1 vendor · 1 product

References

18 links
Show all 18 references