PT-2008-1946 · Sap · Sap Maxdb

Publicado 2008-03-11 · Atualizado 2017-08-08 · CVE-2008-0306

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SAP MaxDB version 7.6.0.37

Description The issue allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

Recommendations For SAP MaxDB version 7.6.0.37, consider restricting access to environment variables that can modify configuration settings until a patch is available.

Correção

Identificadores relacionados

CVE-2008-0306

Produtos afetados

Sap Maxdb

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41104 · Nota
• http://securitytracker.com/id?1019570 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670 · Nota
• http://securityfocus.com/bid/28185 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0306 · Nota de Segurança
• http://secunia.com/advisories/29312 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0844/references · Nota