Borland Software

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5244 1Borland Software 1Interbase Apr 23, 2026 Oct 6, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP po...Show more Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.Show less
CVE-2007-5243 1Borland Software 1Interbase Apr 23, 2026 Oct 6, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP...Show more Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecified vectors involving the (4) jrd8_attach_database or (5) expand_filename2 function.Show less
CVE-2007-3566 1Borland Software 1Interbase Apr 23, 2026 Jul 26, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.
CVE-2006-6201 2Borland Software Revilloc 5C++ Builder DelphiDeveloper Studio+2 more Apr 23, 2026 Dec 1, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code v...Show more Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.Show less
CVE-2006-0634 1Borland Software 1C++ Builder Apr 16, 2026 Feb 10, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications th...Show more Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.Show less
CVE-2004-2121 1Borland Software 1Web Server For Corel Paradox Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\....Show more Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.Show less
CVE-2004-0204 4Bea Borland SoftwareBusinessobjects+1 more 9Business Solutions Crm Crystal EnterpriseCrystal Enterprise Java Sdk+6 more Apr 16, 2026 Aug 6, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Micro...Show more Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.Show less
CVE-2004-2043 2Borland Software Firebirdsql 3Firebird InterbaseInterbase Superserver Apr 16, 2026 May 1, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long da...Show more Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.Show less
CVE-2004-1833 1Borland Software 1Interbase Apr 16, 2026 Mar 20, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.
CVE-2003-0197 2Borland Software Firebirdsql 2Firebird Interbase Apr 16, 2026 Apr 11, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
CVE-2002-1514 1Borland Software 1Interbase Apr 16, 2026 Apr 2, 2003 N/A· v4 N/A· v3 7.2 HIGH· v2 gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
CVE-2002-2087 1Borland Software 1Interbase Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
CVE-2001-0008 2Borland Software Firebirdsql 2Firebird Interbase Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
CVE-2000-0866 1Borland Software 1Interbase Superserver Apr 16, 2026 Nov 14, 2000 N/A· v4 N/A· v3 2.1 LOW· v2 Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.