Borland InterBase multiple functions buffer overflow
| borland-multiple-functions-bo (36956) |  High Risk |
Description:
Borland InterBase is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by multiple functions. By sending a specially-crafted request using various parameters, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
Platforms Affected:
- Borland, InterBase LI-V8.0.0.53
- Borland, InterBase LI-V8.0.0.54
- Borland, InterBase LI-V8.1.0.253
- Borland, InterBase WI-O6.0.1.6
- Borland, InterBase WI-O6.0.2.0
- Borland, InterBase WI-V5.1.1.680
- Borland, InterBase WI-V5.5.0.742
- Borland, InterBase WI-V6.0.0.627
- Borland, InterBase WI-V6.0.1.0
- Borland, InterBase WI-V6.0.1.6
- Borland, InterBase WI-V6.5.0.28
- Borland, InterBase WI-V7.0.1.1
- Borland, InterBase WI-V7.5.0.129
- Borland, InterBase WI-V7.5.1.80
- Borland, InterBase WI-V8.0.0.123
- Borland, InterBase 2007 8.1.0.257
Remedy:
No remedy available as of July 6, 2008.
Consequences:
Gain Access
References:
- Full-Disclosure Mailing List, Wed Oct 03 2007 - 21:58:42 CDT, [RISE-2007002] Borland InterBase Multiple Buffer Overflow Vulnerabilities at http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0051.html.
- Interbase Web site, Borland InterBase Software Cross Platform Embedded Database at http://www.borland.com/interbase/.
- RISE-2007002, Borland InterBase Multiple Buffer Overflow Vulnerabilities at http://risesecurity.org/advisory/RISE-2007002/.
- BID-25917: Borland InterBase Multiple Remote Buffer Overflow Vulnerabilities
- CVE-2007-5243: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
- SA27058: Borland InterBase Multiple Buffer Overflow Vulnerabilities
- SECTRACK ID: 1018772: Borland InterBase Buffer Overflows Let Remote Users Execute Arbitrary Code
- VUPEN/ADV-2007-3381: Borland InterBase Multiple Request Hadling Buffer Overflow Vulnerabilities
Reported:
Oct 03, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net