PT-2003-1964 · Sap · Sap Db
Published
2003-11-21
·
Updated
2008-09-05
·
CVE-2003-0943
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SAP DB versions prior to 7.4.03.30
Description
The issue allows remote attackers to obtain potentially sensitive information or redirect attacks against internal databases. This is possible due to several services being enabled by default, including (1) waecho, (2) Web SQL Interface (
websql), and (3) Web Database Manager (webdbm).Recommendations
For SAP DB versions prior to 7.4.03.30, consider disabling the waecho, Web SQL Interface (
websql), and Web Database Manager (webdbm) services to minimize the risk of exploitation. Update to version 7.4.03.30 or later to fully resolve the issue.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sap Db