AbdulAziz Hariri and Zein Fneish have discovered two vulnerabilities in InterBase SMP 2009, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors when processing certain packets. This can be exploited to cause stack-based buffer overflows by sending specially crafted packets to an affected server (port 3050/TCP).

The vulnerabilities are confirmed in InterBase SMP 2009 version 9.0.3.437 running on a Windows system. Other versions may also be affected.

Solution
Restrict access to affected systems.

Provided and/or discovered by
AbdulAziz Hariri and Zein Fneish

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area