CVE-2004-2043
InterBase and Firebird < 1.5 - Denial of Service via Long Database Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-2043. PoCs published by Aviram Jenik, wsxz.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Borland InterBase 7.1 SP2 and lower, allowing remote code execution via a crafted network packet. It binds a shell to port 65535 on the target system.
Description
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Borland InterBase 7.1 SP2 and lower, allowing remote code execution via a crafted network packet. It binds a shell to port 65535 on the target system.
This exploit targets a remote buffer overflow vulnerability in Firebird/InterBase database servers (CVE-2004-2043). It sends maliciously crafted packets to trigger the overflow and execute shellcode, resulting in a port-bound shell on TCP port 65535.