PT-2004-1212 · Sap · Sap Db

Kf · Publicado 2004-03-16 · Atualizado 2017-07-11 · CVE-2003-1034

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP DB versions 7.x

Description The RPM installation of SAP DB creates certain programs with world-writable permissions, allowing local users to gain privileges by modifying those programs. Specifically, the programs dbmsrv or lserver are created with these permissions.

Recommendations For SAP DB version 7.x, change the permissions of the dbmsrv and lserver programs to prevent world-writable access. As a temporary workaround, consider restricting access to these programs until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2003-1034

Produtos afetados

Sap Db

Referências · 4

• http://marc.info/?l=bugtraq&m=104914778303805&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11669 · Nota
• http://securityfocus.com/bid/7242 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1034 · Nota de Segurança