Description
fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores.
References
- http://www.firebirdsql.org/rlsnotes/Firebird-2.0-ReleaseNotes.pdf
- 28474 vdb-entry
- 29501 third-party-advisory
- DSA-1529 vendor-advisory