CVE-2002-2087: borland_software interbase

EPSS trend

Probability

1.26%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

0.00 pp

From 1.26% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

7 found

referenceUnverified
Exploit Reference (cert.uni-stuttgart.de)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

Show all 7 exploits

exploit-databaselocalbsdVerified
Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation
Maturity: weaponized
exploit-databaselocalfreebsdVerified
Firebird 1.0 - GDS_Inet_Server Interbase Environment Variable Buffer Overflow
Maturity: weaponized
exploit-databaselocalunixVerified
Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1)
Maturity: weaponized
exploit-databaselocalunixVerified
Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (2)
Maturity: weaponized

References

4 links

cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.htmlMailing ListX Refsource BUGTRAQExploitVendor Advisory
www.securityfocus.com/bid/5046VDB EntryX Refsource BIDExploitPatch
www.securityfocus.com/bid/5044VDB EntryX Refsource BIDExploit
www.iss.net/security_center/static/9392.phpVDB EntryX Refsource XF

Related vulnerabilities

CVE-2003-0197borland_softwareinterbase+10.54%23y ago08-04-2003 04:00Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).CVE-2007-5244borland_softwareinterbase37.50%19y ago06-10-2007 17:00Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.CVE-2007-5243borland_softwareinterbase40.06%19y ago06-10-2007 17:00Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.CVE-2007-3566borland_softwareinterbase66.08%19y ago26-07-2007 18:00Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.CVE-2001-0008borland_softwareinterbase+113.31%25y ago07-05-2001 04:00Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.CVE-2004-2043borland_softwareinterbase+311.87%21y ago10-05-2005 04:00Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.

All vulnerabilities ininterbase

CVE-2002-2087: borland_software interbase

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References