PatchTheCVEinterbase vulnerabilities and fixes
Recent CVEs affecting interbase, with upgrade or downgrade steps. 10 tracked.
interbase has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-04-22. Highest priority: CVE-2007-5244 (score 67/100).
- CVE-2008-1910 HIGH 10.0 DOWNGRADE Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote
- CVE-2007-5244 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecif
- CVE-2007-5243 HIGH 9.3 DOWNGRADE Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 thr
- CVE-2007-3566 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows
- CVE-2004-2043 MEDIUM 5.0 DOWNGRADE DOWNGRADE Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other produc
- CVE-2004-1833 HIGH 7.5 DOWNGRADE The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows loca
- CVE-2003-0197 HIGH 7.2 DOWNGRADE DOWNGRADE Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LO
- CVE-2002-2087 MEDIUM 4.6 DOWNGRADE Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE env
- CVE-2002-1514 HIGH 7.2 DOWNGRADE gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink atta
- CVE-2001-0008 HIGH 10.0 DOWNGRADE UPGRADE Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using store
FAQ
How do I fix interbase vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is interbase being exploited right now?
None of the tracked interbase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which interbase CVE should I patch first?
CVE-2007-5244 currently ranks highest (67/100): Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecif.