PT-2003-1964 · Sap · Sap Db

Publicado 2003-11-21 · Atualizado 2008-09-05 · CVE-2003-0943

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP DB versions prior to 7.4.03.30

Description The issue allows remote attackers to obtain potentially sensitive information or redirect attacks against internal databases. This is possible due to several services being enabled by default, including (1) waecho, (2) Web SQL Interface (websql), and (3) Web Database Manager (webdbm).

Recommendations For SAP DB versions prior to 7.4.03.30, consider disabling the waecho, Web SQL Interface (websql), and Web Database Manager (webdbm) services to minimize the risk of exploitation. Update to version 7.4.03.30 or later to fully resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0943

Produtos afetados

Sap Db

Referências · 2

• 🔥 http://atstake.com/research/advisories/2003/a111703-2.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0943 · Nota de Segurança