Hi all, For everyone using Interbase, you should read this immediately, and act now if required. The problem was highlighted by the Open Source Firebird project, and a fix is available - a link is at the referenced website. http://www.cert.org/advisories/CA-2001-01.html -------------------------- Overview of the Report Interbase is an open source database package that had previously been distributed in a closed source fashion by Borland/Inprise. Both the open and closed source versions of the Interbase server contain a compiled-in back door account with a known password. -------------------------- FYI: About the CERT/CC The CERT Coordination Center is part of the Networked Systems Survivability Program at the Software Engineering Institute at Carnegie Mello University. We were started by DARPA (the Defense Advanced Research Projects Agency, part of the U.S. Department of Defense) in December 1988 after the Morris Worm incident crippled approximately 10% of all computers connected to the Internet. Originally, our work was almost exclusively incident response. Since then, we have worked to help start other incident response teams, coordinate the efforts of teams when responding to large-scale incidents, provide training to incident response professionals, and research the causes of security vulnerabilities, prevention of vulnerabilities, system security improvement, and survivability of large-scale networks. -------------------------- Kind Regards Gary ======================================================== Gary Benner - Software Developer [EMAIL PROTECTED] Corporate Software New Zealand Limited Auckland - New Zealand tel: +64-9 846-6067 (24hr) fax: +64-9 846-6152 mob: (021)-966-992 Software System Design - Consulting - Mentoring - Data Modelling Client Server - Delphi - Interbase - Oracle - Web-based Technologies Electronic Automation and Systems - Microcontroller Design & Software http://www.corporate.co.nz Ref#: 41006 --------------------------------------------------------------------------- New Zealand Delphi Users group - Delphi List - [EMAIL PROTECTED] Website: http://www.delphi.org.nz To UnSub, send email to: [EMAIL PROTECTED] with body of "unsubscribe delphi"