CVE-2002-1576 in SAP

Riassunto

di MITRE

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 15/03/2004
• Divulgazione: 15/04/2004
• Moderazione: accettato
• Voce: VDB-21740
• CPE: pronto
• CWE: CWE-61 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.2 (NVD)
• EPSS: 0.00903
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1576
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1576
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1576/