high7.2Public exploit code
CVE-2002-1576
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges wi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP DB 7.3.00 - Symbolic Link2002-12-04 · local · unix · Verified
Impact
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Sap Db | Version 7.3.00 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103903565829796&w=2
- http://www.sapdb.org/sap_db_alert.htm
- http://www.securityfocus.com/bid/6316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10762
- http://marc.info/?l=bugtraq&m=103903565829796&w=2
- http://www.sapdb.org/sap_db_alert.htm
- http://www.securityfocus.com/bid/6316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10762