It is possible to connect to the remote database service using default credentials. The remote Firebird Server uses default credentials (SYSDBA/masterkey). An attacker may use this flaw to execute commands against the remote host, as well as read your database content.

Change the default password by using the gsec management tool.

• http://www.firebirdsql.org/manual/qsg2-config.html#qsg2-config-security

---

Updated on 2015-03-25