Lucene search

K
kasperskyKaspersky LabKLA10092
HistoryApr 11, 2003 - 12:00 a.m.

KLA10092 LPE vulnerability in Borland Interbase

2003-04-1100:00:00
Kaspersky Lab
threats.kaspersky.com
21

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Detect date:

04/11/2003

Severity:

High

Description:

A buffer overflow was found in Borland Interbase. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally at a point related to gds_lock_mgr via specially designed environment variables.

Affected products:

Borland Interbase Database 6 all versions

Solution:

Update to latest version

Impacts:

PE

Related products:

Borland Interbase

CVE-IDS:

CVE-2003-01977.2High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Related for KLA10092