Vulnerabilities > CVE-2002-1514 - Unspecified vulnerability in Borland Software Interbase

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
borland-software
exploit available

Summary

gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.

Exploit-Db

descriptionInterbase 5/6 GDS_Lock_MGR UMask File Permission Changing Vulnerability. CVE-2002-1514. Local exploit for linux platform
idEDB-ID:21865
last seen2016-02-02
modified2002-09-25
published2002-09-25
reportergrazer
sourcehttps://www.exploit-db.com/download/21865/
titleInterbase 5/6 GDS_Lock_MGR UMask File Permission Changing Vulnerability