Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVCattach or (b) INETconnect function, (2) a long create request on TCP port 3050 to the (c) isccreatedatabase or (d) jrd8createdatabase function, (3) a long attach request on TCP port 3050 to the (e) iscattachdatabase or (f) PWDdbaliased function, or unspecified vectors involving the (4) jrd8attachdatabase or (5) expandfilename2 function.

Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the openmarkerfile function.