CVE-2002-2087 Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
MediumCVSS 4.6
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| borland software interbase | = 6.0 | No fix listed |
References
- 20020618 Interbase 6.0 malloc() issues exploit mailing-list vendor-advisory
- interbase-interbase-variable-bo(9392) vdb-entry
- 5044 exploit vdb-entry
- 5046 exploit patch vdb-entry