CVE-2003-0940

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-15

Last modified

2024-09-16

Affected products

• Sap Db (Sap)

References

• http://www.atstake.com/research/advisories/2003/a111703-2.txt