PT-2004-2732 · Borland · Borland Interbase

Publicado 2004-03-20 · Atualizado 2017-07-11 · CVE-2004-1833

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Borland Interbase version 7.1

Description The issue concerns the admin.ib file in Borland Interbase, which has default world writable permissions. This allows local users to gain database administrative privileges.

Recommendations For Borland Interbase version 7.1, change the permissions of the admin.ib file to prevent world writability, restricting access to authorized users only.

Exploit

Correção

Identificadores relacionados

CVE-2004-1833

Produtos afetados

Borland Interbase

Referências · 7

• 🔥 http://securitytracker.com/id?1009500 · Exploit
• 🔥 http://secunia.com/advisories/11172 · Exploit
• http://securityfocus.com/bid/9929 · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15546 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1833 · Nota de Segurança
• http://osvdb.org/4381 · Aviso do Fabricante