[ GLSA 200405-18 ] Buffer Overflow in Firebird

From: Thierry Carrez (koon_at_gentoo.org)
Date: 05/23/04

  • Next message: Rob Brown: "cPanel mod_phpsuexec Vulnerability" 
    Date: Sun, 23 May 2004 14:12:58 +0200
To: gentoo-announce@lists.gentoo.org

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Gentoo Linux Security Advisory GLSA 200405-18
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                                http://security.gentoo.org/
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

      Severity: High
         Title: Buffer Overflow in Firebird
          Date: May 23, 2004
          Bugs: #20837
            ID: 200405-18

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Synopsis
    ========

    A buffer overflow via environmental variables in Firebird may allow a
    local user to manipulate or destroy local databases and trojan the
    Firebird binaries.

    Background
    ==========

    Firebird is an open source relational database that runs on Linux,
    Windows, and various UNIX systems.

    Affected packages
    =================

        -------------------------------------------------------------------
         Package / Vulnerable / Unaffected
        -------------------------------------------------------------------
      1 dev-db/firebird < 1.5 >= 1.5

    Description
    ===========

    A buffer overflow exists in three Firebird binaries (gds_inet_server,
    gds_lock_mgr, and gds_drop) that is exploitable by setting a large
    value to the INTERBASE environment variable.

    Impact
    ======

    An attacker could control program execution, allowing privilege
    escalation to the UID of Firebird, full access to Firebird databases,
    and trojaning the Firebird binaries. An attacker could use this to
    compromise other user or root accounts.

    Workaround
    ==========

    There is no known workaround.

    Resolution
    ==========

    All users should upgrade to the latest version of Firebird:

        # emerge sync

        # emerge -pv ">=dev-db/firebird-1.5"
        # emerge ">=dev-db/firebird-1.5"

    References
    ==========

      [ 1 ] Bugtraq Security Announcement
            http://securityfocus.com/bid/7546/info/
      [ 2 ] Sourceforge BugTracker Announcement

    http://sourceforge.net/tracker/?group_id=9028&atid=109028&func=detail&aid=739480

    Availability
    ============

    This GLSA and any updates to it are available for viewing at
    the Gentoo Security Website:

         http://security.gentoo.org/glsa/glsa-200405-18.xml

    Concerns?
    =========

    Security is a primary focus of Gentoo Linux and ensuring the
    confidentiality and security of our users machines is of utmost
    importance to us. Any security concerns should be addressed to
    security@gentoo.org or alternatively, you may file a bug at
    http://bugs.gentoo.org.

    License
    =======

    Copyright 2004 Gentoo Technologies, Inc; referenced text
    belongs to its owner(s).

    The contents of this document are licensed under the
    Creative Commons - Attribution / Share Alike license.

    http://creativecommons.org/licenses/by-sa/1.0

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.4 (GNU/Linux)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

    iD8DBQFAsJVJvcL1obalX08RAj+PAKCb9Fd0AtIgaUbIj171XyOS2C1KrwCgli71
    8qHVQCl6dlag+WIA4iPZR7w=
    =zCcg
    -----END PGP SIGNATURE-----

  • Next message: Rob Brown: "cPanel mod_phpsuexec Vulnerability"

    Relevant Pages

    • Re: A free personal use dbms for windows/linux ?
      ... Actually when I first discovered Firebird I was really impressed. ... any DBMS), a sepearate file is created for it, to store its rows? ... written so in Navathe & Elmasri's Fundamental of Databases 4th ed. ... there may be multiple files. ...
      (comp.databases)
    • Re: Free alternatives to SQL Server
      ... > PostgreSQL and Firebird. ... PS: don't even think of MySQL:) ... > data providers for these databases. ...
      (microsoft.public.dotnet.general)
    • Re: Robust single file database
      ... Don't go for FlashFiler. ... The most powerful and interesting ability of Firebird is that it comes ... with an embedded server. ... And it has a Read-Only mode for Databases deployed on CD's ...
      (borland.public.delphi.thirdpartytools.general)
    • Re: Transferring data from Firebird to MS SQL server
      ... > I have two databases one in Firebird, the other in SQL Server. ... > datapump is a non-starter. ...
      (borland.public.delphi.thirdpartytools.general)
    • [Full-Disclosure] [ GLSA 200405-18 ] Buffer Overflow in Firebird
      ... local user to manipulate or destroy local databases and trojan the ... Firebird binaries. ... escalation to the UID of Firebird, full access to Firebird databases, ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)