Submitted by: @reevespaul

A command such as this:

gbak -b -service localhost:service_mgr c:\firebird\examples\employee.fdb employee.fbk

will generate the backup file in the system directory. However, if the service manager is not used the backup file is placed in the current directory (as one would expect.)

I can't see how this could be exploited, but it is certainly not an example of good practice.