PT-2008-1946 · Sap · Sap Maxdb

Published 2008-03-11 · Updated 2017-08-08 · CVE-2008-0306

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SAP MaxDB version 7.6.0.37

Description The issue allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

Recommendations For SAP MaxDB version 7.6.0.37, consider restricting access to environment variables that can modify configuration settings until a patch is available.

Fix

Related Identifiers

CVE-2008-0306

Affected Products

Sap Maxdb

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-0306 · Security Note
• http://secunia.com/advisories/29312 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41104 · Note
• http://securitytracker.com/id?1019570 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670 · Note
• http://securityfocus.com/bid/28185 · Note
• http://vupen.com/english/advisories/2008/0844/references · Note