PT-2010-2174 · Embarcadero Technologies · Interbase Smp

Published 2010-01-26 · Updated 2011-01-12 · CVE-2010-0391

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Embarcadero Technologies InterBase SMP 2009 version 9.0.3.437

Description The issue involves multiple stack-based buffer overflows that could allow remote attackers to execute arbitrary code. This is achieved by sending crafted packets, although the specific vectors involved are not detailed. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For Embarcadero Technologies InterBase SMP 2009 version 9.0.3.437, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-0391

Affected Products

Interbase Smp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-0391 · Security Note
• http://secunia.com/advisories/38285 · Vendor Advisory
• http://osvdb.org/61892 · Note
• http://securityfocus.com/bid/37916 · Note