CVE-2006-6201: Buffer Overflow
First published: Fri Dec 01 2006(Updated: )
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RevilloC MailServer | ||
| Borland C++ Builder | =6.x | |
| Borland Software IDSQL32.dll | =5.1.0.4 | |
| Borland Software Developer Studio | =2006 | |
| Borland Delphi | =5.x | |
| Borland Software IDSQL32.dll | =5.1.0.2 | |
| Borland C++ Builder | =5.x | |
| Embarcadero C++Builder XE6 | =2006 | |
| Borland Delphi | =6.x | |
| Borland Delphi | =7.x | |
| Borland C++ Builder | =2006 | |
| Borland Delphi | =2006 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-6201?
CVE-2006-6201 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-6201?
To fix CVE-2006-6201, upgrade the affected applications to the latest version that addresses this buffer overflow issue.
What software is affected by CVE-2006-6201?
CVE-2006-6201 affects multiple versions of Borland's idsql32.dll, C++ Builder, Developer Studio, Delphi, and RevilloC MailServer.
What kind of attack is associated with CVE-2006-6201?
CVE-2006-6201 allows remote attackers to execute arbitrary code through a specially crafted SQL statement.
Is there a workaround for CVE-2006-6201?
Temporary workarounds for CVE-2006-6201 may include restricting access to the vulnerable applications or services until a patch is applied.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- vendor/revilloc
- canonical/revilloc mailserver
- vendor/borland software
- canonical/borland c++ builder
- version/borland c++ builder/6.x
- canonical/borland software idsql32.dll
- version/borland software idsql32.dll/5.1.0.4
- canonical/borland software developer studio
- version/borland software developer studio/2006
- canonical/borland delphi
- version/borland delphi/5.x
- version/borland software idsql32.dll/5.1.0.2
- version/borland c++ builder/5.x
- canonical/embarcadero c++builder xe6
- version/embarcadero c++builder xe6/2006
- version/borland delphi/6.x
- version/borland delphi/7.x
- version/borland c++ builder/2006
- version/borland delphi/2006