CVE-2002-1514

Description

gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.

Affected products

• borland_software / interbase4.0 – 4.0
• borland_software / interbase5.0 – 5.0
• borland_software / interbase6.0 – 6.0
• borland_software / interbase6.5 – 6.5

Exploits & proofs of concept

• exploit-dbInterbase 5/6 - GDS_Lock_MGR UMask File Permission Changingby grazer

References

• MISChttp://www.iss.net/security_center/static/10196.php
• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-09/0311.html
• MISChttp://www.securityfocus.com/bid/5805