Privilege Escalation Vulnerability in SAP MaxDB by SAP
CVE-2008-0306

Currently unrated

Key Information:

Vendor

SAP
Status
Maxdb
Vendor
CVE Published:
11 March 2008

What is CVE-2008-0306?

The sdbstarter component in SAP MaxDB versions, including 7.6.0.37, is susceptible to a privilege escalation vulnerability. This issue enables local users to execute arbitrary commands by manipulating certain environment variables, which can lead to unauthorized access and changes in configuration settings. Organizations using affected versions should take measures to mitigate this risk.

References

http://www.securitytracker.com/id?1019570
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/0844/references
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/41104
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.