CVE-2007-5243
InterBase 8.0.0.53-8.1.0.253 & WI 5.1.1.680-8.1.0.257 - Remote Code Execution via Stack Overflow
Title source: llmExploitation Summary
EIP tracks 21 public exploits for CVE-2007-5243.
PoCs published by Metasploit, Adriano Lima, Ramon de C Valle, including Metasploit module exploits/windows/misc/ib_isc_attach_database.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Firebird/InterBase via a malformed service attach request (opcode 82). It targets specific versions (WI-V1.5.3.4870, WI-V1.5.4.4910) by overflowing a buffer with a crafted payload, leading to arbitrary code execution.
Description
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.
Exploits (21)
This Metasploit module exploits a stack buffer overflow in Firebird/InterBase via a malformed service attach request (opcode 82). It targets specific versions (WI-V1.5.3.4870, WI-V1.5.4.4910) by overflowing a buffer with a crafted payload, leading to arbitrary code execution.
This exploit targets a stack buffer overflow in Borland InterBase's isc_create_database() function by sending a crafted create request. It includes a payload delivery mechanism and brute-force targeting for different versions.
This exploit targets a stack buffer overflow in Borland InterBase's isc_attach_database() function by sending a crafted create request. It includes a payload delivery mechanism and is designed for remote code execution on Windows systems.
This Metasploit module exploits a stack buffer overflow in Borland InterBase via a crafted service attach request. It targets multiple versions of InterBase and delivers a payload to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase via a crafted `isc_create_database()` request. It targets multiple versions with specific return addresses and payload constraints.
This is a Metasploit module exploiting a stack buffer overflow in Borland InterBase via a crafted attach request. It targets multiple versions of InterBase and delivers a payload for remote code execution.
This exploit targets a stack buffer overflow in Borland InterBase by sending a crafted attach request. It leverages a known return address to execute arbitrary payloads, achieving remote code execution.
This exploit targets a stack buffer overflow in Borland InterBase via a crafted create request. It sends a malicious payload to trigger remote code execution on vulnerable versions.
This exploit targets a stack buffer overflow in Borland InterBase's INET_connect() function by sending a crafted service attach request. It leverages a return address overwrite to execute arbitrary payloads, achieving remote code execution.
This exploit targets a stack-based buffer overflow in Borland InterBase's jrd8_create_database() function via a crafted create request. It delivers a payload to achieve remote code execution on vulnerable Linux systems.
This exploit targets a stack overflow vulnerability in Borland InterBase's INET_connect() function by sending a maliciously crafted service attach request. It includes a payload delivery mechanism for remote code execution on Linux systems.
This exploit targets a stack-based buffer overflow in Borland InterBase via a crafted attach request. It leverages a known return address to execute arbitrary payloads, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's `isc_attach_database()` function by sending a crafted attach request with a malformed length field, leading to remote code execution on vulnerable versions.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's `isc_create_database()` function by sending a crafted create request. It includes multiple targets for different InterBase versions and uses a brute-force approach to trigger the vulnerability.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's SVC_attach() function by sending a crafted service attach request. It includes payload handling, target-specific return addresses, and brute-force capabilities.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's isc_attach_database() function by sending a crafted create request with a malicious payload. It targets Firebird WI-V2.0.0.12748 and WI-V2.0.1.12855, leveraging a known return address to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's `isc_create_database()` function by sending a crafted create request with a malformed length field and embedded payload. It targets Firebird WI-V2.0.0.12748 and WI-V2.0.1.12855, leveraging a hardcoded return address to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase's SVC_attach() function by sending a crafted service attach request with a maliciously long payload. It includes multiple targets for different InterBase versions and leverages return addresses to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase by sending a crafted attach request to trigger remote code execution. It targets specific versions of InterBase and uses a known return address for reliable exploitation.
This Metasploit module exploits a stack buffer overflow in Borland InterBase via a crafted service attach request. It targets specific versions of InterBase on Linux, using a return address to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Borland InterBase by sending a crafted create request to trigger remote code execution. It targets specific versions of InterBase and uses a known return address to redirect execution to the payload.