263 matches found
CVE-2002-2087
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsdrop, 2 gdslockmgr, or 3 gdsinetserver...
CVE-2002-2087
The CVE-2002-2087 entry describes a buffer overflow in Borland InterBase 6.0 that allows local users to execute arbitrary code by supplying a long INTERBASE environment variable when invoking gds_drop, gds_lock_mgr, or gds_inet_server. This is documented across multiple feeds (Red Hat, CVE listin...
CVE-2002-2087: Undefined Security Weakness
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsdrop, 2 gdslockmgr, or 3 gdsinetserver...
CVE-2004-2043
CVE-2004-2043 affects Firebird/InterBase-based systems, with a buffer overflow in the ibserver that can be triggered remotely by a long database name via the gsec command, causing a crash (DoS). Affected: Firebird 1.0 and other versions before 1.5 (Firebird2/InterBase-derived releases noted in De...
CVE-2004-1833
CVE-2004-1833 affects Borland Interbase 7.1 on Linux. The admin.ib file has default world-writable permissions, enabling local users to gain database administrative privileges (privilege escalation). No remediation details are provided in the supplied documents; mode is based on the concrete desc...
CVE-2004-1833
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...
CVE-2004-1833: Undefined Security Weakness
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...
CVE-2004-2043: Undefined Security Weakness
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...
CVE-2002-1514
The CVE-2002-1514 entry concerns gds_lock_mgr in Borland InterBase . The vulnerability allows local users to overwrite files and gain privileges via a symlink attack on a temporary file named isc_init1.X , demonstrated by modifications to the xinetdbd file. The provided records indicate a local a...
CVE-2002-1514
gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...
CVE-2002-1514: Undefined Security Weakness
gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...
Interbase/Firebird Account Detection
Binary data 4512.prm...
Interbase Database Version Detection
Binary data 4513.prm...
Interbase Database Remote Stack Overflow
Binary data 4514.prm...
Borland Interbase <= 7.x Remote Exploit
Exploit for linux platform in category remote exploits ======================================= Borland Interbase -p Port -t Target number from list.\n\n"; print STDERR "Targets: 0 - Linux Interbase 7.1 SP 2 1 - Linu...
Borland Interbase 7.x - Remote Buffer Overflow
!/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -= Priv8security.com InterBase Server 7.1 SP2 and lower...
Borland Interbase 7.x - Remote Buffer Overflow
Borland Interbase 7.x - Remote Buffer Overflow !/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -=...
[Full-Disclosure] Firebird [ AND Interbase 7 ] Database Remote Database Name Overflow
Someone that has had some success communicating things security wise to Borland may wish to contact them about this. root@CloneRiot bin rpm -ivh /root/InterBaseSSLI-V7.1.0-1.i386.rpm kf@CloneRiot bin$ pwd /opt/interbase/bin kf@CloneRiot bin$ ./gsec -database 127.0.0.1:perl -e'print "A"x300' gdb c...
CVE-2004-2043
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...