PT-2004-2732 · Borland · Borland Interbase

Published 2004-03-20 · Updated 2017-07-11 · CVE-2004-1833

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Borland Interbase version 7.1

Description The issue concerns the admin.ib file in Borland Interbase, which has default world writable permissions. This allows local users to gain database administrative privileges.

Recommendations For Borland Interbase version 7.1, change the permissions of the admin.ib file to prevent world writability, restricting access to authorized users only.

Exploit

Fix

Related Identifiers

CVE-2004-1833

Affected Products

Borland Interbase

References · 7

• 🔥 http://securitytracker.com/id?1009500 · Exploit
• 🔥 http://secunia.com/advisories/11172 · Exploit
• http://securityfocus.com/bid/9929 · Vendor Advisory
• http://idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1833 · Security Note
• http://osvdb.org/4381 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15546 · Note