Borland Software: >> Interbase >> 5.0 Security Vulnerabilities
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.
CVSS Score
5.0
EPSS Score
0.475
Published
2004-05-01
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.
CVSS Score
7.5
EPSS Score
0.004
Published
2004-03-20
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
CVSS Score
7.2
EPSS Score
0.001
Published
2003-04-02
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
CVSS Score
10.0
EPSS Score
0.275
Published
2001-02-12