CVE-2003-0939

eo420GetStringFromVarPart in veo420.c for SAP database server SAP DB 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver aka serv.exe process on TCP port 7269, which prevents the server from NULL terminating the...

CVE-2003-0939

SAP DB (SAP database server) 7.4.03.27 and earlier is affected by a remote buffer overflow in the niserver/serv.exe interface. The flaw lies in eo420_GetStringFromVarPart (veo420.c): a 256-byte variable-sized segment is copied without bounds checking, potentially allowing remote code execution vi...

CVE-2003-0939

eo420GetStringFromVarPart in veo420.c for SAP database server SAP DB 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver aka serv.exe process on TCP port 7269, which prevents the server from NULL terminating the...