FKIE_CVE-2006-6201

Vulnerability from fkie_nvd - Published: 2006-12-01 01:28 - Updated: 2025-04-09 00:30
Severity ?
Summary
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.
References
cve@mitre.orghttp://secunia.com/advisories/22570Vendor Advisory
cve@mitre.orghttp://secunia.com/secunia_research/2006-70/advisory/Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/453003/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/21342
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/4763
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/30583
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22570Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/secunia_research/2006-70/advisory/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/453003/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/21342
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/4763
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/30583
Impacted products
Vendor Product Version
borland_software c\+\+_builder 5.x
borland_software c\+\+_builder 6.x
borland_software c\+\+_builder 2006
borland_software c_builder 2006
borland_software delphi 5.x
borland_software delphi 6.x
borland_software delphi 7.x
borland_software delphi 2006
borland_software developer_studio 2006
borland_software idsql32.dll 5.1.0.2
borland_software idsql32.dll 5.1.0.4
revilloc mailserver *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:borland_software:c\\+\\+_builder:5.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "0692F6EA-B824-4D86-B871-7067379C99D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:c\\+\\+_builder:6.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C974CA6-63EE-4846-B6DB-5E94DEC7AD5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:c\\+\\+_builder:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C96CF3B-20E8-42FD-AAC7-79FBF1A38A88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:c_builder:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "93A52E6C-B30A-4C23-A082-322DF54ED9A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:delphi:5.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E3962B9-A4A5-45DC-87B4-E2AE144FD7FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:delphi:6.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "8535C9C4-D6E6-4ACC-8111-E81A127D11FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:delphi:7.x:*:*:*:*:*:*:*",
              "matchCriteriaId": "85A0E169-1DE6-4CFD-B919-CA9AFB23DB2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:delphi:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "75C29691-B481-4EFB-B258-3367509497CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:developer_studio:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "A14BD3FB-EE97-4828-B99F-AD00FA5F9062",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:idsql32.dll:5.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1A1594E-A2D6-455E-B235-0F6E10B45F86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:borland_software:idsql32.dll:5.1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A74869CE-C6A2-463A-BB8A-633C924C6E0B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:revilloc:mailserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C4A185C-42B1-4D3A-94FC-A30DC75209FB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function."
    },
    {
      "lang": "es",
      "value": "Desbordamiento del buffer basado en pilas en el Borland idsql32.dll 5.1.0.4, como el usado en el RevilloC MailServer, la 5.2.0.2 como el usado en el Developer Studio 2006 y posiblemente otras versiones, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de la declaraci\u00f3n de una sentencia larga en SQL relacionada con el uso de la funci\u00f3n DbiQExec."
    }
  ],
  "id": "CVE-2006-6201",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-12-01T01:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22570"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2006-70/advisory/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/453003/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/21342"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/4763"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30583"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22570"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/secunia_research/2006-70/advisory/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/453003/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/21342"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/4763"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30583"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.