CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

CVE-2008-0306

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings...

CVE-2008-0307

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption...

SAP MaxDB sdbstarter环境变量本地特权提升漏洞

BUGTRAQ ID: 28185 CVE ID:CVE-2008-0306 CNCVE ID:CNCVE-20080306 SAP's MaxDB是一款商业性质的数据库程序。 SAP's MaxDB包含的"sdbstarter"程序存在设计错误，本地攻击者可以利用漏洞获得ROOT权限。 问题存在于"sdbstarter"程序处理部分环境变量过程中，这些变量用于制定各个MaxDB组件使用的配置设置，由于不正确处理变量数据，可导致以ROOT权限执行任意指令。 SAP MaxDB 7.6.0.37 可参考如下安全公告获得补丁信息SAP note 1140135：...

iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability

iDefense Security Advisory 03.10.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 10, 2008 I. BACKGROUND SAP's MaxDB is a database software product. MaxDB was released as open source from version 7.5 up to version 7.6.00. Later versions are no longer open source but are available for...

SAP MaxDB database server multiple security vulnerabilities

vserver remote heap overflow, sdbstarter privilege escalation...

SAP MaxDB cons.exe Remote Command Injection

SAP MaxDB is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP MaxDB...

CVE-2008-0244

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in execsdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe...

CVE-2008-0244

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in execsdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe...

Command injection

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in execsdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe...

DSquare Exploit Pack: D2SEC_MAXDB

Name| d2secmaxdb ---|--- CVE| CVE-2008-0244 Exploit Pack| D2ExploitPack Description| SAP MaxDB cons.exe Remote Command Injection Vulnerability Notes|...

CVE-2008-0244

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in execsdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe...

SAP MaxDB cons.exe远程命令注入漏洞

BUGTRAQ ID: 27206 MaxDB是SAP应用中广泛使用的数据库管理系统。 MaxDB在处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 如果未经认证的远程攻击者执行了show或execsdbinfo等特殊命令的话，MaxDB服务器就会通过system执行cons.exe DATABASE COMMAND，而使用system执行cons程序允许外部攻击者通过传送&&或其他方式在服务器上执行任意命令。例如，可使用以下SAP命令查看Windows上C盘的内容： execsdbinfo && echo dir c:\ | cmd.exe SAP...

SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit

No description provided by source. Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemm...

SAP MaxDB 7.6.03.07 - Remote Command Execution

SAP MaxDB 7.6.03.07 - Remote Command Execution Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author:...

SAP MaxDB shell characters security vulnerability

Shell characters vulnerability on executing pre-authentication execsdbinfo command...

Pre-auth remote commands execution in SAP MaxDB 7.6.03.07

Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

SAP MaxDB <= 7.6.03.07 pre-auth Remote Command Execution Exploit

Exploit for multiple platform in category remote exploits ================================================================ SAP MaxDB = 7.6.03.07 pre-auth Remote Command Execution Exploit ================================================================ Luigi Auriemma Application: SAP MaxDB...

SAP MaxDB 7.6.03.07 - Remote Command Execution

Luigi Auriemma Application: SAP MaxDB https://www.sdn.sap.com/irj/sdn/maxdb http://www.sap.com Versions: = 7.6.03 build 007 Platforms: Windows, Linux and Solaris Bug: pre-auth remote commands execution Exploitation: remote Date: 09 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

SAP MaxDB未明远程执行漏洞

BUGTRAQ ID: 26822 CNCAN ID:CNCAN-2007121207 MaxDB是SAP授权给MySQL的基于SAP DB的数据库。 SAP MaxDB存在未明安全问题，本地攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 SAP MaxDB 7.6.00.37 SAP MaxDB 7.4.3.32 目前没有解决方案提供： https://www.sdn.sap.com/irj/sdn/maxdb...