Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
BID:7546
Info
Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
| Bugtraq ID: | 7546 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 10 2003 12:00AM |
| Updated: | May 10 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to "bob" <[email protected]>. |
| Vulnerable: |
Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Gentoo Linux 1.2 Gentoo Linux 1.1 a Gentoo Linux 0.7 Gentoo Linux 0.5 Firebird Firebird 1.0.2 Firebird Firebird 1.0 Borland/Inprise Interbase 6.0 |
| Not Vulnerable: | |
Discussion
Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. As Firebird is based on Borland/Inprise Interbase source code, it is very likely that Interbase is prone to this issue also.
A buffer overflow has been discovered in the setuid root program gds_inet_server, packaged with Firebird. This problem could allow a local user to execute the program with strings of arbitrary length. By using a custom crafted string, the attacker could overwrite stack memory, including the return address of a function, and potentially execute arbitrary code as root.
Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. As Firebird is based on Borland/Inprise Interbase source code, it is very likely that Interbase is prone to this issue also.
A buffer overflow has been discovered in the setuid root program gds_inet_server, packaged with Firebird. This problem could allow a local user to execute the program with strings of arbitrary length. By using a custom crafted string, the attacker could overwrite stack memory, including the return address of a function, and potentially execute arbitrary code as root.
Exploit / POC
Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
DSR-firebird.c contributed by bob <[email protected]> (for Firebird 1.0.2)
DSR-olbird.c contributed by bob <[email protected]> (for Firebird 1.0.0)
DSR-firebird.c contributed by bob <[email protected]> (for Firebird 1.0.2)
DSR-olbird.c contributed by bob <[email protected]> (for Firebird 1.0.0)
Solution / Fix
Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
Solution:
Gentoo has released an advisory (GLSA 200405-18) and an updated eBuild to address this issue. Gentoo advises that users upgrade to the latest version of Firebird by executing the following commands as a Superuser:
emerge sync
emerge -pv ">=dev-db/firebird-1.5"
emerge ">=dev-db/firebird-1.5"
Solution:
Gentoo has released an advisory (GLSA 200405-18) and an updated eBuild to address this issue. Gentoo advises that users upgrade to the latest version of Firebird by executing the following commands as a Superuser:
emerge sync
emerge -pv ">=dev-db/firebird-1.5"
emerge ">=dev-db/firebird-1.5"
References
Firebird GDS_Inet_Server Interbase Environment Variable Buffer Overflow Vulnerability
References:
References:
- Firebird Homepage (Firebird)
- Interbase Homepage (Borland/Inprise)
- Re: [ GLSA 200405-18 ] Buffer Overflow in Firebird ("KF \(lists\)"