CVE-2003-0265 in SAP

Riassunto

di MITRE

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 07/05/2003
• Divulgazione: 27/05/2003
• Moderazione: accettato
• Voce: VDB-60
• CPE: pronto
• CWE: CWE-362 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.2 (NVD)
• EPSS: 0.00863
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0265
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0265
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0265/