CVE-2003-0940

SAP DB web-tools (web server component sqlfopenc) contains a directory traversal vulnerability that allows remote reading of arbitrary files via dot-dot sequences in URLs. Affected: SAP DB web-tools prior to 7.4.03.30; attack surface includes the web-server administration pages and default servic...

CVE-2003-0942

CVE-2003-0942 describes a buffer overflow in the Web Agent Administration component of SAP DB web-tools prior to 7.4.03.30. The vulnerability is triggered by a long Name parameter to waadmin.wa, allowing remote attackers to execute arbitrary code. Multiple sources (NVD, Red Hat, CVE listings, and...

CVE-2003-0943

CVE-2003-0943 affects SAP DB web-tools prior to 7.4.03.30. The default-enabled services (waecho, Web SQL Interface websql, Web Database Manager webdbm) can enable remote attackers to view potentially sensitive information or redirect attacks against internal databases. Connected sources also desc...

CVE-2003-0944

SAP DB web-tools : The vulnerability set includes a buffer overflow in the default waecho service of SAP DB’s web-tools, and related issues in Web Agent Administration, Web SQL, and Web DBM. The root cause is improper handling of long requestURIs and related inputs, enabling remote code execution...

CVE-2003-0945

CVE-2003-0945 affects SAP DB Web-tools Web Database Manager prior to 7.4.03.30. The vulnerability stems from generating predictable session IDs in the Web Database Manager, with IDs placed in the URL, enabling remote attackers to perform unauthorized activities. The issue is addressed by SAP with...

CVE-2003-0941

The CVE-2003-0941 issue affects SAP DB’s web-tools/Web Agent component prior to version 7.4.03.30. The vulnerability allows remote attackers to access the Web Agent Administration pages (waadmin.wa) without authentication and modify configuration via a direct request, enabling potential remote ad...

CVE-2003-0944: Undefined Security Weakness

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI...

CVE-2003-0940: Undefined Security Weakness

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2003-0943: Undefined Security Weakness

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via 1 waecho, 2 Web SQL Interface websql, or 3 Web Database Manager webdbm...

CVE-2003-0942: Undefined Security Weakness

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa...

CVE-2003-0941: Undefined Security Weakness

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa...

CVE-2003-0945: Undefined Security Weakness

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...

SAP DB web-tools multiple issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: SAP DB web-tools multiple issues Release Date: 11/17/2003 Application: SAP DB 7.4.03.30 Platform: Linux IA32 Microsoft Windows NT4/2000/XP SUN Solaris HPUX Compaq True64 Severity: Remote fi...

SAP DB priv. escalation/remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: SAP DB priv. escalation/remote code execution Release Date: 11/17/2003 Application: SAP DB 7.4.03.27 23-June-2003 and before Platform: Microsoft Windows NT4/2000/XP 1 and 2 Linux IA32 2 SUN...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0620

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...

[SECURITY] [DSA-364-3] New man-db packages fix segmentation fault

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-3 [email protected] http://www.debian.org/security/ Matt Zimmerman August 18th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...