fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firebird | Firebirdsql | 1.5 (including) | 1.5 (including) |
References
- http://secunia.com/advisories/29501
- http://www.debian.org/security/2008/dsa-1529
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0-ReleaseNotes.pdf
- http://www.securityfocus.com/bid/28474
- http://secunia.com/advisories/29501
- http://www.debian.org/security/2008/dsa-1529
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0-ReleaseNotes.pdf
- http://www.securityfocus.com/bid/28474