Borland Software Interbase — known CVE vulnerabilities

Every CVE whose affected-product data names Borland Software Interbase, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2001-0008 — CVSS 10.0 (critical): Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
• CVE-2007-5244 — CVSS 9.3 (critical): Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris…
• CVE-2007-5243 — CVSS 9.3 (critical): Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote…
• CVE-2004-1833 — CVSS 7.5 (high): The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database…
• CVE-2007-3566 — CVSS 7.5 (high): Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute…
• CVE-2003-0197 — CVSS 7.2 (high): Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable…
• CVE-2002-1514 — CVSS 7.2 (high): gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X"…
• CVE-2004-2043 — CVSS 5.0 (medium): Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase…
• CVE-2002-2087 — CVSS 4.6 (medium): Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when…