Interbase Database Remote Stack Overflow

Binary data 4514.prm...

Interbase Database Version Detection

Binary data 4513.prm...

Borland Interbase <= 7.x Remote Exploit

Exploit for linux platform in category remote exploits ======================================= Borland Interbase -p Port -t Target number from list.\n\n"; print STDERR "Targets: 0 - Linux Interbase 7.1 SP 2 1 - Linu...

Borland Interbase 7.x - Remote Buffer Overflow

Borland Interbase 7.x - Remote Buffer Overflow !/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -=...

Borland Interbase 7.x - Remote Buffer Overflow

!/usr/bin/perl Priv8security com remote exploit for Borland Interbase 7.1 SP 2 and lower Public Version!!! Bug found by Aviram Jenik www.securiteam.com unixfocus 5AP0P0UCUO.html wsxz@localhost buffer$ perl priv8ibserverb.pl -h localhost -t 0 -= Priv8security.com InterBase Server 7.1 SP2 and lower...

[Full-Disclosure] Firebird [ AND Interbase 7 ] Database Remote Database Name Overflow

Someone that has had some success communicating things security wise to Borland may wish to contact them about this. root@CloneRiot bin rpm -ivh /root/InterBaseSSLI-V7.1.0-1.i386.rpm kf@CloneRiot bin$ pwd /opt/interbase/bin kf@CloneRiot bin$ ./gsec -database 127.0.0.1:perl -e'print "A"x300' gdb c...

CVE-2004-2043

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service crash via a long database name, as demonstrated using the gsec command...

CVE-2004-1833

The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...

Borland Interbase weak permissions

File /opt/interbase/admin.ib is world writable...

[Full-Disclosure] iDEFENSE Security Advisory 03.19.04: Borland Interbase admin.ib Administrative Access Vulnerability

Borland Interbase admin.ib Administrative Access Vulnerability iDEFENSE Security Advisory 03.19.04 www.idefense.com/application/poi/display?id=80&type=vulnerabilities March 19, 2004 I. BACKGROUND Borland Interbase is a small, high performance commercial database for Linux, Solaris, and Windows...

CVE-2003-0281

Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...

CVE-2003-0281

CVE-2003-0281 describes a buffer overflow in Firebird 1.0.2 and earlier versions (and possibly other InterBase-based products) that can be triggered by a long INTERBASE environment variable when invoking gds_inet_server, gds_lock_mgr, or gds_drop. The underlying issue allows local users to execut...

CVE-2003-0281

Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling 1 gdsinetserver, 2 gdslockmgr, or 3 gdsdrop...

Firebird 1.0 - GDS_Inet_Server Interbase Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/7546/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. As Firebird is based on Borland/Inprise Interbase source code, it is very likely that Interbase is prone to this issue also. ...

CVE-2003-0197

Buffer overflow gdslockmgr of Interbase Database 6.x allows local users to gain privileges via a long ISCLOCKENV environment variable INTERBASELOCK...

KLA10092 LPE vulnerability in Borland Interbase

A buffer overflow was found in Borland Interbase. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally at a point related to gdslockmgr via specially designed environment variables. Original advisories - Related products Borland-Interba...

CVE-2003-0197

Buffer overflow gdslockmgr of Interbase Database 6.x allows local users to gain privileges via a long ISCLOCKENV environment variable INTERBASELOCK...

CVE-2003-0197

CVE-2003-0197 affects Borland Interbase Database 6.x. A buffer overflow in gds_lock_mgr allows local users to gain privileges by supplying a long ISC_LOCK_ENV (INTERBASE_LOCK) environment variable. The issue enables local privilege escalation and can impact confidentiality, integrity, and availab...

Interbase/Firebird - external file security bug

Class: IB/FB can create or modify all accessible files on disk Remote: YES Localy: YES Vulnerable: IB 6.01, IB6.5, FB 1.0.2 WIN/Linux Not Vulnerable: IB7.0 Not Tested: FB 1.5 Beta Overview: IB/FB support external file for table. Data store in raw format and there isn't access rectriction. If file...

Interbase Firebird unauthorized file access

It's possible to access any external file by using it as a table storage...