PT-2004-1212 · Sap · Sap Db

Kf · Published 2004-03-16 · Updated 2017-07-11 · CVE-2003-1034

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP DB versions 7.x

Description The RPM installation of SAP DB creates certain programs with world-writable permissions, allowing local users to gain privileges by modifying those programs. Specifically, the programs dbmsrv or lserver are created with these permissions.

Recommendations For SAP DB version 7.x, change the permissions of the dbmsrv and lserver programs to prevent world-writable access. As a temporary workaround, consider restricting access to these programs until a proper fix is applied.

Fix

Related Identifiers

CVE-2003-1034

Affected Products

Sap Db

References · 4

• http://securityfocus.com/bid/7242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1034 · Security Note
• http://marc.info/?l=bugtraq&m=104914778303805&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11669 · Note