CVE-2002-1514 gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
HighCVSS 7.2
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| borland software interbase | = 4.0 | No fix listed |
| borland software interbase | = 5.0 | No fix listed |
| borland software interbase | = 6.0 | No fix listed |
| borland software interbase | = 6.5 | No fix listed |
References
- 20020925 Borland Interbase local root exploit exploit mailing-list vendor-advisory
- interbase-gdslockmgr-bo(10196) vdb-entry vendor-advisory
- 5805 exploit vdb-entry vendor-advisory