CVE-2003-1033

The CVE affects SAP DB Development Tools 7.x (instances of instdbmsrv and instlserver). The root cause is that these programs trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver binary. This trust enables local users to escalate privile...

CVE-2003-1033: Undefined Security Weakness

The 1 instdbmsrv and 2 instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious...

SAP DB development tools privelege escalation

instdbmsrv and instlserver allow chmod/chown for any files...