CVE-2008-1880

CVE-2008-1880

EPSS 2.1%

The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC_PASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://bugs.gentoo.org/show_bug.cgi?id=216158 http://secunia.com/advisories/30162 http://security.gentoo.org/glsa/glsa-200805-06.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/42299 http://www.securityfocus.com/bid/29123