CVE-2003-0265 in SAP Database
요약 (영어)
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
예약하다
2003. 05. 07.
공개
2003. 05. 27.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 60 | SAP Database Installation Routine 경쟁 조건 | 362 | 개념 증명 | 공식 수정 | CVE-2003-0265 |