CVE-2002-1576

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program...

CVE-2002-1576

Summary: SAP DB 7.3 and earlier versions contain a local privilege escalation in the lserver component. The lserver uses the current working directory to locate and execute the lserversrv program. If a directory contains a symlink to the lserver executable and a malicious lserversrv is placed the...

CVE-2003-1034

The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...

CVE-2003-1033

The CVE affects SAP DB Development Tools 7.x (instances of instdbmsrv and instlserver). The root cause is that these programs trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver binary. This trust enables local users to escalate privile...

CVE-2003-1034

The CVE-2003-1034 issue affects SAP DB 7.x when installed as an RPM: the dbmsrv and lserver binaries are created with world-writable permissions, enabling local users to modify these executables and escalate privileges. This is a local privilege escalation vulnerability due to insufficient file p...

CVE-2003-1033

The 1 instdbmsrv and 2 instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious...

CVE-2002-1576: Undefined Security Weakness

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program...

CVE-2003-1034: Undefined Security Weakness

The RPM installation of SAP DB 7.x creates the 1 dbmsrv or 2 lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs...

CVE-2003-1033: Undefined Security Weakness

The 1 instdbmsrv and 2 instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious...

CVE-2003-0940

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2003-0942

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa...

CVE-2003-0943

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via 1 waecho, 2 Web SQL Interface websql, or 3 Web Database Manager webdbm...

CVE-2003-0944

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI...

CVE-2003-0941

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa...

CVE-2003-0945

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...

SAP DB / MaxDB Detection

SAP DB or MaxDB, an ERP software, is running on the remote port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11929; scriptversion"1.26"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"SAP DB / MaxDB Detection";...

CVE-2003-0944

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI...

CVE-2003-0943

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via 1 waecho, 2 Web SQL Interface websql, or 3 Web Database Manager webdbm...

CVE-2003-0942

CVE-2003-0942 describes a buffer overflow in the Web Agent Administration component of SAP DB web-tools prior to 7.4.03.30. The vulnerability is triggered by a long Name parameter to waadmin.wa, allowing remote attackers to execute arbitrary code. Multiple sources (NVD, Red Hat, CVE listings, and...

CVE-2003-0941

The CVE-2003-0941 issue affects SAP DB’s web-tools/Web Agent component prior to version 7.4.03.30. The vulnerability allows remote attackers to access the Web Agent Administration pages (waadmin.wa) without authentication and modify configuration via a direct request, enabling potential remote ad...