Interbase GDS_Lock_MGR UMask File Permission Changing Vulnerability

Bugtraq ID:	5805
Class:	Input Validation Error
CVE:	CVE-2002-1514
Remote:	No
Local:	Yes
Published:	Sep 25 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	Vulnerability discovery credited to <[email protected]>.
Vulnerable:	Borland/Inprise Interbase 6.5 Borland/Inprise Interbase 6.0 - Cobalt Qube 3.0 - Cobalt RaQ 4.0 - Cobalt RaQ 3.0 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - HP HP-UX 11.0 - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Redhat Linux 7.3 i386 - Redhat Linux 7.2 ia64 - Redhat Linux 7.2 i386 - Redhat Linux 7.1 ia64 - Redhat Linux 7.1 i386 - Redhat Linux 7.1 alpha - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - SCO Unixware 7.1 - Sun Solaris 8_sparc - SuSE Linux 8.0 i386 - SuSE Linux 7.3 sparc - SuSE Linux 7.3 ppc - SuSE Linux 7.3 i386 - SuSE Linux 7.2 i386 - SuSE Linux 7.1 x86 - SuSE Linux 7.1 sparc - SuSE Linux 7.1 ppc - SuSE Linux 7.1 alpha - SuSE Linux 7.0 sparc - SuSE Linux 7.0 ppc - SuSE Linux 7.0 i386 - SuSE Linux 7.0 alpha - SuSE Linux 6.4 ppc - SuSE Linux 6.4 i386 - SuSE Linux 6.4 alpha Borland/Inprise Interbase 5.0 - HP HP-UX 11.0 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - SCO Unixware 7.1 - Sun Solaris 8_sparc Borland/Inprise Interbase 4.0 - HP HP-UX 11.0 - Linux kernel 2.3 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - SCO Unixware 7.1 - Sun Solaris 8_sparc
Not Vulnerable:

Interbase GDS_Lock_MGR UMask File Permission Changing Vulnerability

Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems.

The gds_lock_mgr program within Interbase is typically installed setuid. This program does not properly handle user-supplied umasks, and may allow the creation of files with insecure permissions as a privileged user.

Interbase GDS_Lock_MGR UMask File Permission Changing Vulnerability

Exploit contributed by <[email protected]>:

• /data/vulnerabilities/exploits/interbase-gds-exploit.c

Interbase GDS_Lock_MGR UMask File Permission Changing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Interbase GDS_Lock_MGR UMask File Permission Changing Vulnerability

References:

• Interbase Homepage (Borland/Inprise)