Hi all,

For everyone using Interbase, you should read this immediately, and act now if 
required. The problem was highlighted by the Open
Source Firebird project, and a fix is available - a link is at the referenced website.


http://www.cert.org/advisories/CA-2001-01.html

--------------------------

Overview of the Report

Interbase is an open source database package that had previously been distributed in a 
closed source fashion by Borland/Inprise. Both
the open and closed source versions of the Interbase server contain a compiled-in back 
door account with a known password.

--------------------------

FYI:

About the CERT/CC

The CERT Coordination Center is part of the Networked Systems Survivability Program at 
the Software Engineering Institute at
Carnegie Mello University. We were started by DARPA (the Defense Advanced Research 
Projects Agency, part of the U.S. Department
of Defense) in December 1988 after the Morris Worm incident crippled approximately 10% 
of all computers connected to the Internet.

Originally, our work was almost exclusively incident response. Since then, we have 
worked to help start other incident response teams,
coordinate the efforts of teams when responding to large-scale incidents, provide 
training to incident response professionals, and
research the causes of security vulnerabilities, prevention of vulnerabilities, system 
security improvement, and survivability of
large-scale networks.

--------------------------

Kind Regards

Gary



========================================================

Gary Benner   -   Software Developer                  [EMAIL PROTECTED]
Corporate Software New Zealand Limited       Auckland - New Zealand
tel: +64-9 846-6067 (24hr)   fax: +64-9 846-6152     mob: (021)-966-992
Software System Design  -  Consulting  -  Mentoring   -   Data Modelling
Client Server - Delphi  -  Interbase  - Oracle - Web-based Technologies
Electronic Automation and Systems - Microcontroller Design & Software
                                http://www.corporate.co.nz

Ref#: 41006



---------------------------------------------------------------------------
    New Zealand Delphi Users group - Delphi List - [EMAIL PROTECTED]
                  Website: http://www.delphi.org.nz
To UnSub, send email to: [EMAIL PROTECTED]
with body of "unsubscribe delphi"

Reply via email to