
CVE-2008-1910 – Borland Interbase 2007 - 'ibserver.exe' Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2008-1910
21 Apr 2008 — Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote attackers to execute arbitrary code via a malformed opcode 0x52 request to TCP port 3050. NOTE: this might overlap CVE-2007-5243 or CVE-2007-5244. Desbordamiento de búfer basado en pila en el servicio de base de datos (ibserver.exe) de Borland InterBase 2007 SP2 permite a atacantes remotos ejecutar código de su elección a través de una petición opcode 0x52 malformada del puerto TCP 3050. NOTA: esto... • https://www.exploit-db.com/exploits/5427 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2008-0311 – Borland CaliberRM - StarTeam Multicast Service Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-0311
06 Apr 2008 — Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (STMulticastService) 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request. Desbordamiento de búfer basado en pila en la función PGMWebHandler::parse_request del componente StarTeam Multicast Service (STMulticastService) 6.4 en Borland CaliberRM 2006 permite a atacantes remotos ejecutar código de su elección a través de una petición HTTP gran... • https://www.exploit-db.com/exploits/16434 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2007-5244 – Borland Interbase 2007/2007 SP2 - 'open_marker_file' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-5244
06 Oct 2007 — Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function. Desbordamiento de búfer basado en pila en Borland InterBase LI 8.0.0.53 hasta la 8.1.0.253 sobre Linux, y posiblemente en versiones no especificadas sobre Solaris, permite a atacantes remotos ejecutar código de su elección a través de una respuesta a... • https://www.exploit-db.com/exploits/10019 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2007-5243 – Borland Interbase - 'jrd8_create_database()' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-5243
06 Oct 2007 — Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create request on TCP port 3050 to the (c) isc_create_database or (d) jrd8_create_database function, (3) a long attach request on TCP port 3050 to the (e) isc_attach_database or (f) PWD_db_aliased function, or unspecifi... • https://www.exploit-db.com/exploits/16843 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2007-3566 – Borland Interbase - 'Create-Request' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-3566
26 Jul 2007 — Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp. Desbordamiento de búfer basado en pila en el servicio de base de datos (ibserver.exe) del Borland InterBase 2007 anterior al SP2 permite a atacantes remotos ejecutar código de su elección a través de un valor de tamaño grande en una petición "create" al puerto 3050/tcp. • https://www.exploit-db.com/exploits/16453 •

CVE-2006-6201
https://notcve.org/view.php?id=CVE-2006-6201
01 Dec 2006 — Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function. Desbordamiento del buffer basado en pilas en el Borland idsql32.dll 5.1.0.4, como el usado en el RevilloC MailServer, la 5.2.0.2 como el usado en el Developer Studio 2006 y posiblemente otras versiones, permite a atacantes rem... • http://secunia.com/advisories/22570 •

CVE-2006-0634
https://notcve.org/view.php?id=CVE-2006-0634
10 Feb 2006 — Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers. • http://securitytracker.com/id?1015588 •

CVE-2004-2121 – borland Web server for corel paradox 1.0 b3 - Directory Traversal
https://notcve.org/view.php?id=CVE-2004-2121
31 Dec 2004 — Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL. • https://www.exploit-db.com/exploits/23597 •

CVE-2004-0204 – Business Objects Crystal Reports 9/10 Web Form Viewer - Directory Traversal
https://notcve.org/view.php?id=CVE-2004-0204
11 Jun 2004 — Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx. Vulnerabilidad de atravesamiento de directorios en los visores web de Business Objects Crystal Reports 9... • https://www.exploit-db.com/exploits/24077 •

CVE-2004-2043 – Borland Interbase 7.x - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2004-2043
01 May 2004 — Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command. • https://www.exploit-db.com/exploits/303 •