Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-3566 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Software Interbase

4 documents4 sources

Severity

7.5HIGHNVD

EPSS

76.8%

top 1.04%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Borland Software Interbase

Timeline

PublishedJul 26

Latest updateMay 1

Description

Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDborland_software/interbase2007

Patches

Patch: dvlabs.tippingpoint.com ↗Patch: secunia.com ↗Patch: www.codegear.com ↗

🔴Vulnerability Details

GHSA

GHSA-vv83-68vg-922h: Stack-based buffer overflow in the database service (ibserver↗2022-05-01

▶

CVEList

CVE-2007-3566: Stack-based buffer overflow in the database service (ibserver↗2007-07-26

▶

💥Exploits & PoCs

Exploit-DB

Borland Interbase - 'Create-Request' Remote Buffer Overflow (Metasploit)↗2010-06-15

▶