Integer Signedness Error in SAP MaxDB Leads to Code Execution Vulnerability
CVE-2008-0307

Currently unrated

Key Information:

Vendor

SAP
Status
Maxdb
Vendor
CVE Published:
11 March 2008

What is CVE-2008-0307?

The vulnerability arises from an integer signedness error in the vserver component of SAP MaxDB that can potentially lead to arbitrary code execution. Attackers may exploit this issue by triggering heap corruption through unknown vectors, which could allow unauthorized control over affected systems. Security measures and caution are advised to mitigate the risks associated with this vulnerability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/41107
vdb-entryx_refsource_XF
http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE
http://www.securityfocus.com/bid/28183
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.