CVE-2002-2087

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/9392.php
http://www.securityfocus.com/bid/5044Exploit
http://www.securityfocus.com/bid/5046Exploit, Patch
http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.htmlExploit, Vendor Advisory
http://www.iss.net/security_center/static/9392.php
http://www.securityfocus.com/bid/5044Exploit
http://www.securityfocus.com/bid/5046Exploit, Patch

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-208810.0The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access.CVE-2002-20894.6Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.CVE-2002-20905.0Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such CVE-2002-20917.5Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the usernam CVE-2002-20923.7Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileg CVE-2002-20932.1The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by CVE-2002-20945.0Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path th CVE-2002-20955.0Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a simil CVE-2002-20967.5Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code CVE-2002-20975.0The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets.CVE-2002-20987.5Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large packets.CVE-2002-20997.2Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a