Lucene search
+L

Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password

🗓️ 10 Jan 2001 00:00:00Reported by Frank Schlottmann-GoeddeType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 34 Views

Interbase contains a hardcoded backdoor user "LOCKSMITH" compromising database security.

Related
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2001-0008
7 May 200104:00
cve
cvelist
Cvelist
CVE-2001-0008
7 May 200104:00
cvelist
nvd
NVD
CVE-2001-0008
12 Feb 200105:00
nvd
securityvulns
securityvulns
Advisory CA-2001-01
11 Jan 200100:00
securityvulns
cert
CERT
Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password
10 Jan 200100:00
cert
source: https://www.securityfocus.com/bid/2192/info

Interbase is an open source relational database offered by Borland Inprise Corporation.

Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account will eliminate all implemented security allowing full control of any database and contents within the database, this level of access will allow any function to be performed including modification of objects, root access and execution of arbitrary functions. "LOCKSMITH" is hard coded in the database engine and is located in the jrd/pwd.h header.

Successful exploitation of this vulnerability will lead to complete compromise of the host.

#define LOCKSMITH_USER "politically"

#define LOCKSMITH_PASSWORD "correct"

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.13307
34