Borland InterBase PWD_db_aliased() Buffer Overflow

vendor:

InterBase

by:

ramon, Adriano Lima

7.5

CVSS

HIGH

Buffer Overflow

119

CWE

Product Name: InterBase

Affected Version From: LI-V8.0.0.53

Affected Version To: LI-V8.1.0.253

Patch Exists: NO

Related CWE: CVE-2007-5243

CPE: a:borland:interbase

Metasploit:

Other Scripts:

Platforms Tested: Linux

2007

This module exploits a stack buffer overflow in Borland InterBase by sending a specially crafted attach request.

Apply the latest patch or upgrade to a non-vulnerable version.

Source