There is no back door in Interbase 6.0.1

Regards,

Howie Hamlin - inFusion Project Manager
On-Line Data Solutions, Inc.
www.CoolFusion.com
631-737-4668 x101
inFusion Mail Server (iMS) - the World's most configurable mail server
Get your free copy of iMS POST-SE Server from CoolFusion!

----- Original Message -----
From: "Andy Ewings" <[EMAIL PROTECTED]>
To: "CF-Talk" <[EMAIL PROTECTED]>
Sent: Thursday, February 22, 2001 12:27 PM
Subject: RE: Cheaper Alternative to SQL Server 2000


> Whatever you do don't get interbase!!!....it's a pigging nightmare.
Besides
> there is a major security flaw:
>
> Interbase contains a backdoor user account and password called
> "LOCKSMITH". When accessed this account will eliminate all implemented
> security allowing full control of any database and contents within the
> database, this level of access will allow any function to be performed
> including modification of objects, root access and execution of arbitrary
> functions. "LOCKSMITH" is hard coded in the database engine and is located
> in the jrd/pwd.h header.
>
> ------------------------------------------------------------------
> Andrew Ewings
> Project Manager
> Thoughtbubble Ltd
> http://www.thoughtbubble.net
> ------------------------------------------------------------------
> United Kingdom
> http://www.thoughtbubble.co.uk/
> Tel: +44 (0) 20 7387 8890
> ------------------------------------------------------------------
> New Zealand
> http://www.thoughtbubble.co.nz/
> Tel: +64 (0) 9 488 9131


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to