sap sap db vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 up to and including 7.5, allow remote malicious users to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryS...

Sap Sap Db 7.4.03.30 Sap Sap Db 7.4.3 Sap Sap Db 7.4 Sap Sap Db 7.4.03.29 Sap Sap Db 7.4.3.7 Beta Sap Sap Db 7.5 Sap Sap Db 7.3.00 Sap Sap Db 7.3.29

3 EDB exploits

7.2

CVSSv2

The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that ...

Sap Sap Db 7.3.00 Sap Sap Db 7.4

6.2

CVSSv2

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local malicious users to gain root privileges by modifying the files before the permissions are changed.

Sap Sap Db 7.4.3.7 Beta Sap Sap Db 7.3.29

1 EDB exploit

10

CVSSv2

Buffer overflow in SAP DB and MaxDB prior to 7.6.00.30 allows remote malicious users to execute arbitrary code via a long database name when connecting via a WebDBM client.

Mysql Maxdb Sap-db Sap-db

1 EDB exploit

7.5

CVSSv2

web-tools in SAP DB prior to 7.4.03.30 installs several services that are enabled by default, which could allow remote malicious users to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3)...

Sap Sap Db

7.2

CVSSv2

vos24u.c in SAP database server (SAP DB) 7.4.03.27 and previous versions allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLA...

Sap Sap Db

7.5

CVSSv2

eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and previous versions may allow remote malicious users to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents ...

Sap Sap Db

5

CVSSv2

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB prior to 7.4.03.30 allows remote malicious users to read arbitrary files via .. (dot dot) sequences in a URL.

Sap Sap Db

7.5

CVSSv2

web-tools in SAP DB prior to 7.4.03.30 allows remote malicious users to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.

Sap Sap Db

7.5

CVSSv2

Buffer overflow in Web Agent Administration service in web-tools for SAP DB prior to 7.4.03.30 allows remote malicious users to execute arbitrary code via a long Name parameter to waadmin.wa.

Sap Sap Db

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook