Buffer overflow gdslockmgr of Interbase Database 6.x allows local users to gain privileges via a long ISCLOCKENV environment variable (INTERBASELOCK).
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gdsinetserver, (2) gdslockmgr, or (3) gdsdrop.