PrimeBase Database Poor File Permissions and Crypt() Hash

#847 · 2003-10-20

CVE ID(s): CVE-none

Notified: 2003-10-20

Description:

The Firebird(tm) database engine is derived from the InterBase(r) product currently owned by Borland.  The documentation forInterBase v 6.0 applies also to the current FireBird release.  InterBase documentation is available in Adobe Acrobat format from http://info.borland.com/techpubs/interbase/."  The "information database" stored in the file isc4.gdb is read and writeable for all users with the default rpm installation of Firebird-1.0.3 for Linux.

Notes:

2259 6219

Download: http://www.firebirdsql.org http://www.ibphoenix.com

URL: http://www.vapid.dhs.org/advisories/primebase_sql_database_stored_cleartext_password.html