medium6.9
CVE-2008-0306
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to m…
Impact
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Maxdb | Version 7.6.0.37 |
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
- http://secunia.com/advisories/29312
- http://www.securityfocus.com/bid/28185
- http://www.securitytracker.com/id?1019570
- http://www.vupen.com/english/advisories/2008/0844/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41104
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
- http://secunia.com/advisories/29312
- http://www.securityfocus.com/bid/28185
- http://www.securitytracker.com/id?1019570
- http://www.vupen.com/english/advisories/2008/0844/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41104