Gentoo: 200805-06 Normal Severity: Firebird Administrative Access Issue

Gentoo Linux Security Advisory GLSA 200805-06 https://security.gentoo.org/ Severity: Normal Title: Firebird: Data disclosure Date: May 09, 2008 Bugs: #216158 ID: 200805-06

Synopsis ======= Firebird allows remote connections to the administrative account without verifying credentials.
Background ========= Firebird is a multi-platform, open source relational database.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-db/firebird < 2.0.3.12981.0-r6 >= 2.0.3.12981.0-r6
========== Viesturs reported that the default configuration for Gentoo's init script ("/etc/conf.d/firebird") sets the "ISC_PASSWORD" environment variable when starting Firebird. It will be used when no passwor...