← Vulnerability feed

Vulnerability record · CVE-2002-2087 · published 31 December 2002

CVE-2002-2087: Borland software interbase vulnerability

BBorland Software · Interbase

Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.

4.6 CVSS 2.0 Medium EPSS 1.3% · top 31.5%
4.6CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 6 tagged exploit
16 Jun 2026Last modified by NVD

Description

Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html ExploitVendor Advisory
http://www.iss.net/security_center/static/9392.php
http://www.securityfocus.com/bid/5044 Exploit
http://www.securityfocus.com/bid/5046 ExploitPatch
http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html ExploitVendor Advisory
http://www.iss.net/security_center/static/9392.php
http://www.securityfocus.com/bid/5044 Exploit
http://www.securityfocus.com/bid/5046 ExploitPatch

Track CVE-2002-2087 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2001-0008Borland software interbase vulnerabilityBackdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.EPSS 13%9.3CVE-2007-5243Borland software interbase memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers …EPSS 40%9.3CVE-2007-5244Borland software interbase memory buffer overflow vulnerabilityStack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote …EPSS 38%7.5CVE-2007-3566Borland InterBase database service stack buffer overflow via create requestThe database service ibserver.exe in Borland InterBase 2007 before SP2 has a stack-based buffer overflow triggered by a long size value in a create r…EPSS 66%analysed7.5CVE-2004-1833Borland software interbase vulnerabilityThe admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative…EPSS 2.2%7.2CVE-2003-0197Borland software interbase vulnerabilityBuffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_…EPSS 0.54%7.2CVE-2002-1514Borland software interbase vulnerabilitygds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, a…EPSS 0.84%5.0CVE-2004-2043Borland software interbase vulnerabilityBuffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, all…EPSS 12%

Source: NIST National Vulnerability Database (record CVE-2002-2087), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.