Priority HIGH 71
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Micro…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.72368 · Published 2004-06-11 · No fix listed
Priority HIGH 69
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.66081 · Published 2007-07-26 · No fix listed
Priority HIGH 68
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.40062 · Published 2007-10-06 · No fix listed CWE-119
Priority HIGH 67
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP po…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.37503 · Published 2007-10-06 · No fix listed CWE-119
Priority MEDIUM 58
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.13307 · Published 2001-05-07 · No fix listed
Priority LOW 39
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code v…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03432 · Published 2006-12-01 · No fix listed
Priority LOW 37
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long da…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11873 · Published 2005-05-10 · No fix listed
Priority LOW 37
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0215 · Published 2005-05-10 · No fix listed
Priority LOW 33
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00844 · Published 2004-09-01 · No fix listed
Priority LOW 32
Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00536 · Published 2003-04-08 · No fix listed
Priority LOW 28
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\.…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03051 · Published 2005-05-27 · No fix listed
Priority LOW 24
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.01265 · Published 2005-08-05 · No fix listed
Priority LOW 21
Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications th…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00397 · Published 2006-02-10 · No fix listed
Priority LOW 11
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00409 · Published 2000-10-18 · No fix listed