Gecko [ tanishkshah.com ]

Linux evo.fastest-server.com 5.14.0-284.1101.el9.tuxcare.11.els11.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 14 13:30:35 UTC 2026 x86_64
LiteSpeed
Server IP : 103.249.112.113 & Your IP : 216.73.217.135
Domains : 988 Domain
User : tanishks

Name	Size	Permission	Date
sample	[ DIR ]	drwxr-xr-x	2026-09-04 10:12
sql.extensions	[ DIR ]	drwxr-xr-x	2026-09-04 10:12
CHANGELOG.md	130.51 KB	-rw-r--r--	2026-04-17 16:36
Firebird-3-QuickStart.pdf	373.23 KB	-rw-r--r--	2026-04-17 16:36
Firebird-4.0.7-ReleaseNotes.pdf	1.1 MB	-rw-r--r--	2026-04-17 16:36
IDPLicense.txt	25.41 KB	-r--r--r--	2026-04-17 16:36
IPLicense.txt	23.73 KB	-r--r--r--	2026-04-17 16:36
README.DiskSpaceAllocation	3.23 KB	-rw-r--r--	2026-04-17 16:36
README.Fedora	732 B	-rw-r--r--	2026-04-17 16:32
README.IPv6	2.11 KB	-rw-r--r--	2026-04-17 16:36
README.NTSecurity	1.67 KB	-rw-r--r--	2026-04-17 16:36
README.Optimizer.txt	4.22 KB	-rw-r--r--	2026-04-17 16:36
README.SecureRemotePassword.html	10.51 KB	-rw-r--r--	2026-04-17 16:36
README.Win32LibraryInstallation.txt	5.09 KB	-rw-r--r--	2026-04-17 16:36
README.Win9X_NT_embedding	1.08 KB	-rw-r--r--	2026-04-17 16:36
README.build.macosx.md	588 B	-rw-r--r--	2026-04-17 16:36
README.build.mingw.html	4.12 KB	-rw-r--r--	2026-04-17 16:36
README.build.msvc.html	5.9 KB	-rw-r--r--	2026-04-17 16:36
README.build.posix.html	26.14 KB	-rw-r--r--	2026-04-17 16:36
README.coding.style	1.37 KB	-rw-r--r--	2026-04-17 16:36
README.connection_string_charset.txt	2.07 KB	-rw-r--r--	2026-04-17 16:36
README.connection_strings	4.14 KB	-rw-r--r--	2026-04-17 16:36
README.external_routines.txt	4.11 KB	-rw-r--r--	2026-04-17 16:36
README.fb_cancel_operation	2.3 KB	-rw-r--r--	2026-04-17 16:36
README.fb_shutdown	4.44 KB	-rw-r--r--	2026-04-17 16:36
README.fbsvcmgr	5.22 KB	-rw-r--r--	2026-04-17 16:36
README.garbage_collector	2.19 KB	-rw-r--r--	2026-04-17 16:36
README.gbak	829 B	-rw-r--r--	2026-04-17 16:36
README.incompatibilities.3to4.txt	3.22 KB	-rw-r--r--	2026-04-17 16:36
README.incompatibilities.txt	1.79 KB	-rw-r--r--	2026-04-17 16:36
README.instsvc	7.24 KB	-rw-r--r--	2026-04-17 16:36
README.intl	21.38 KB	-rw-r--r--	2026-04-17 16:36
README.isql_enhancements.txt	10.54 KB	-rw-r--r--	2026-04-17 16:36
README.makefiles	3.38 KB	-rw-r--r--	2026-04-17 16:36
README.md	1.83 KB	-rw-r--r--	2026-04-17 16:36
README.modern_cpp.md	2.26 KB	-rw-r--r--	2026-04-17 16:36
README.monitoring_tables	19.57 KB	-rw-r--r--	2026-04-17 16:36
README.online_validation	3.9 KB	-rw-r--r--	2026-04-17 16:36
README.performance_monitoring	2.9 KB	-rw-r--r--	2026-04-17 16:36
README.plugins.html	15.2 KB	-rw-r--r--	2026-04-17 16:36
README.providers.html	10.51 KB	-rw-r--r--	2026-04-17 16:36
README.raw_devices	2.32 KB	-rw-r--r--	2026-04-17 16:36
README.read_consistency.md	14.09 KB	-rw-r--r--	2026-04-17 16:36
README.read_password_from_file	1.19 KB	-rw-r--r--	2026-04-17 16:36
README.replication.md	11.38 KB	-rw-r--r--	2026-04-17 16:36
README.security_database.txt	3.11 KB	-rw-r--r--	2026-04-17 16:36
README.services_extension	11.44 KB	-rw-r--r--	2026-04-17 16:36
README.session_idle_timeouts	4.82 KB	-rw-r--r--	2026-04-17 16:36
README.sha1	6.78 KB	-rw-r--r--	2026-04-17 16:36
README.statement_timeouts	6.77 KB	-rw-r--r--	2026-04-17 16:36
README.superclassic	2.65 KB	-rw-r--r--	2026-04-17 16:36
README.trace_services	7.38 KB	-rw-r--r--	2026-04-17 16:36
README.transaction_at_snapshot.md	906 B	-rw-r--r--	2026-04-17 16:36
README.trusted_authentication	3.14 KB	-rw-r--r--	2026-04-17 16:36
README.user.embedded	3.4 KB	-rw-r--r--	2026-04-17 16:36
README.user.troubleshooting	5.57 KB	-rw-r--r--	2026-04-17 16:36
README.wire.compression.html	1.9 KB	-rw-r--r--	2026-04-17 16:36
README.xnet	1.35 KB	-rw-r--r--	2026-04-17 16:36
udf_replace.sql	10.73 KB	-rw-------	2026-04-17 16:36
udf_replace.txt	2.81 KB	-rw-------	2026-04-17 16:36

Rename

Issue: 
======
 If the LocalSystem user is allowed to install the Firebird Service,
 it could make the whole system accessible to a malicious attacker.

Scope:
======
 Affects Windows NT platforms.

Document author:
=================
 Alex Peshkov (peshkoff@mail.ru)

Document date:  2003/06/22
==============

Firebird installation kits for Windows NT systems, i.e. those that
 support services, currently provide a route into the host system 
 for any hacker who finds a new security hole in Firebird.  All of 
 the current kits install the Firebird service to run under the 
 LocalSystem account. Through Firebird, the attacker can get 
 LocalSystem access to the system.

The steps to fix things manually are simple:

1)  add the user 'firebird' as a member of the Domain users group,  
    with default rights
 
2)  grant this user write access to all databases, including 
    security2.fdb (isc4.gdb in pre-1.5 versions), and the
    firebird.log file

3)  grant the user 'firebird' rights to "Login as service"

4)  make the Firebird services (FirebirdServer and FirebirdGuardian,
    if used, log in with username 'firebird'

Solution:
=========
 Alex Peshkov

People writing installers should note that Firebird's standard routine 
 to install and manage the Firebird Service on WinNT/2000/XP platforms 
 (instsvc.exe) was upgraded in version 1.5 by the addition of an
 optional L[ogin] switch to the {install} command.  It is strongly
 recommended that you employ this switch in the Windows kits, to make
 the 'firebird' user, not LocalSystem, the default account under which
 the Firebird Service logs in.

For more details, see the document README.instsvc
 switch to (see instsvc.exe).