Borland Software vulnerabilities
13 vulnerabilities
Known vulnerabilities in Borland Software products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
Products
8- Interbase9 vulnerabilities
- C\+\+ Builder2 vulnerabilities
- Interbase Superserver2 vulnerabilities
- Delphi1 vulnerabilities
- Developer Studio1 vulnerabilities
- Idsql32.Dll1 vulnerabilities
- Web Server For Corel Paradox1 vulnerabilities
- J Builder0 vulnerabilities
CVE-2003-0197borland_softwareinterbase+1
EPSS score0.54%
Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).CVE-2007-5244borland_softwareinterbaseEPSS score37.50%
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.CVE-2007-5243borland_softwareinterbaseEPSS score40.06%
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.CVE-2007-3566borland_softwareinterbaseEPSS score66.08%
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.CVE-2001-0008borland_softwareinterbase+1EPSS score13.31%
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.CVE-2000-0866borland_softwareinterbase_superserverEPSS score0.41%
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.CVE-2004-2121borland_softwareweb_server_for_corel_paradoxEPSS score3.05%
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.CVE-2004-2043borland_softwareinterbase+3EPSS score11.87%
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.CVE-2004-1833borland_softwareinterbaseEPSS score2.15%
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.CVE-2002-2087borland_softwareinterbaseEPSS score1.26%
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.CVE-2002-1514borland_softwareinterbaseEPSS score0.84%
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.CVE-2006-0634borland_softwarec\+\+_builderEPSS score0.40%
Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.CVE-2006-6201borland_softwarec\+\+_builder+3EPSS score3.42%
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.