medium6.2Public exploit code
CVE-2003-0265
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows lo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP Database 7.3/7.4 - SDBINST Race Condition2003-04-23 · local · linux · Verified
Impact
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Sap Db | Versions 7.3.29, 7.4.3.7_beta |