PT-2003-1961 · Sap · Sap Db

Publicado 2003-11-21 · Atualizado 2008-09-05 · CVE-2003-0940

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP DB versions prior to 7.4.03.30

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using .. (dot dot) sequences in a URL. This affects the sqlfopenc component for web-tools.

Recommendations For versions prior to 7.4.03.30, update to version 7.4.03.30 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0940

Produtos afetados

Sap Db

Referências · 2

• 🔥 http://atstake.com/research/advisories/2003/a111703-2.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0940 · Nota de Segurança