Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Borland Interbase Server Contains Backdoor Account
Borland's standard Interbase package and the Firebird Project Interbase package both contain a backdoor account embedded into the code. Since the account is compiled in, a user cannot remove the account from an installed copy of Interbase.
ITPro Today
January 9, 2001
1 Min Read
ReportedJanuary 10, 2001,by CERT
VERSIONS AFFECTED
Borland/Inprise Interbase 4.x and 5.x
Open source Interbase 6.0 and 6.01
Open source Interbase Firebird 0.9 through 3 and earlier
DESCRIPTION
Borland's standard Interbase package and the FirebirdProject Interbase package both contain a backdoor account embedded into thecode. Since the account is compiled in, a user cannot remove the account from aninstalled copy of Interbase.
Theopen source Interbase database system listens on TCP port 3050 where an intrudercan connect and manipulate database objects on the server. According to CERTAdvisory CA-2001-01,this type of attack includes the ability to insert stored procedures and canlead to further system and network compromise.
VENDORRESPONSE
Borlandand Firebirdoffer fixes for both versions of the Interbase package.
CREDIT
Discovered by CERT
About the Author
You May Also Like
.png?width=700&auto=webp&quality=80&disable=upscale)