<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: borland software</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-5244: Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecif</title><link>https://patchthecve.com/cve/CVE-2007-5244.html</link><guid>https://patchthecve.com/cve/CVE-2007-5244.html</guid><pubDate>Tue, 16 Jun 2026 22:45:43 +0000</pubDate><description>HIGH 9.3: Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versions on Solaris, allows remote attackers to execute arbitrary code via a long attach request on TCP port 3050 to the open_marker_file function.</description></item><item><title>CVE-2007-5243: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 thr</title><link>https://patchthecve.com/cve/CVE-2007-5243.html</link><guid>https://patchthecve.com/cve/CVE-2007-5243.html</guid><pubDate>Tue, 16 Jun 2026 22:45:43 +0000</pubDate><description>HIGH 9.3: Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to the (a) SVC_attach or (b) INET_connect function, (2) a long create </description></item><item><title>CVE-2007-3566: Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows</title><link>https://patchthecve.com/cve/CVE-2007-3566.html</link><guid>https://patchthecve.com/cve/CVE-2007-3566.html</guid><pubDate>Tue, 16 Jun 2026 22:42:17 +0000</pubDate><description>HIGH 7.5: Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.</description></item><item><title>CVE-2006-6201: Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by </title><link>https://patchthecve.com/cve/CVE-2006-6201.html</link><guid>https://patchthecve.com/cve/CVE-2006-6201.html</guid><pubDate>Tue, 16 Jun 2026 22:32:40 +0000</pubDate><description>HIGH 7.5: Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.</description></item><item><title>CVE-2006-0634: Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the &quot;i&gt;sizeof(int)&quot; exp</title><link>https://patchthecve.com/cve/CVE-2006-0634.html</link><guid>https://patchthecve.com/cve/CVE-2006-0634.html</guid><pubDate>Tue, 16 Jun 2026 22:20:58 +0000</pubDate><description>MEDIUM 4.6: Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the &quot;i&gt;sizeof(int)&quot; expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.</description></item><item><title>CVE-2004-2121: Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attack</title><link>https://patchthecve.com/cve/CVE-2004-2121.html</link><guid>https://patchthecve.com/cve/CVE-2004-2121.html</guid><pubDate>Tue, 16 Jun 2026 22:09:03 +0000</pubDate><description>MEDIUM 5.0: Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot &quot;......&quot; sequences, or (2) &quot;%5c%2e%2e&quot; (encoded &quot;\..&quot;) sequences, in the URL.</description></item><item><title>CVE-2004-0204: Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crysta</title><link>https://patchthecve.com/cve/CVE-2004-0204.html</link><guid>https://patchthecve.com/cve/CVE-2004-0204.html</guid><pubDate>Tue, 16 Jun 2026 22:05:09 +0000</pubDate><description>HIGH 7.5: Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to </description></item><item><title>CVE-2004-2043: Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other produc</title><link>https://patchthecve.com/cve/CVE-2004-2043.html</link><guid>https://patchthecve.com/cve/CVE-2004-2043.html</guid><pubDate>Tue, 16 Jun 2026 22:08:53 +0000</pubDate><description>MEDIUM 5.0: Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.</description></item><item><title>CVE-2004-1833: The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows loca</title><link>https://patchthecve.com/cve/CVE-2004-1833.html</link><guid>https://patchthecve.com/cve/CVE-2004-1833.html</guid><pubDate>Tue, 16 Jun 2026 22:08:29 +0000</pubDate><description>HIGH 7.5: The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.</description></item><item><title>CVE-2003-0197: Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LO</title><link>https://patchthecve.com/cve/CVE-2003-0197.html</link><guid>https://patchthecve.com/cve/CVE-2003-0197.html</guid><pubDate>Tue, 16 Jun 2026 22:01:44 +0000</pubDate><description>HIGH 7.2: Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).</description></item><item><title>CVE-2002-1514: gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink atta</title><link>https://patchthecve.com/cve/CVE-2002-1514.html</link><guid>https://patchthecve.com/cve/CVE-2002-1514.html</guid><pubDate>Tue, 16 Jun 2026 21:59:28 +0000</pubDate><description>HIGH 7.2: gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a &quot;isc_init1.X&quot; temporary file, as demonstrated by modifying the xinetdbd file.</description></item><item><title>CVE-2002-2087: Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE env</title><link>https://patchthecve.com/cve/CVE-2002-2087.html</link><guid>https://patchthecve.com/cve/CVE-2002-2087.html</guid><pubDate>Tue, 16 Jun 2026 22:00:37 +0000</pubDate><description>MEDIUM 4.6: Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.</description></item><item><title>CVE-2001-0008: Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using store</title><link>https://patchthecve.com/cve/CVE-2001-0008.html</link><guid>https://patchthecve.com/cve/CVE-2001-0008.html</guid><pubDate>Tue, 16 Jun 2026 21:53:28 +0000</pubDate><description>HIGH 10.0: Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.</description></item><item><title>CVE-2000-0866: Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 byt</title><link>https://patchthecve.com/cve/CVE-2000-0866.html</link><guid>https://patchthecve.com/cve/CVE-2000-0866.html</guid><pubDate>Tue, 16 Jun 2026 21:52:37 +0000</pubDate><description>LOW 2.1: Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.</description></item></channel></rss>