Sap Db (Sap) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2007-07-06. Vendor: Sap.
CVEs of Sap Db
- CVE-2007-3614 - CVSS 7.5 (high), 2007-07-06: Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute…
- CVE-2002-1576 - CVSS 7.2 (high), 2004-04-15: lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges…
- CVE-2003-1033 - CVSS 7.2 (high), 2004-04-15: The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning…
- CVE-2003-0940 - CVSS 5 (medium), 2003-12-15: Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot)…
- CVE-2003-0943 - CVSS 7.5 (high), 2003-12-15: web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive…
- CVE-2003-0939 - CVSS 7.5 (high), 2003-12-15: eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a…
- CVE-2003-0942 - CVSS 7.5 (high), 2003-12-15: Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name…
- CVE-2003-0945 - CVSS 7.5 (high), 2003-12-15: The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized…
- CVE-2003-0938 - CVSS 7.2 (high), 2003-12-15: vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current…
- CVE-2003-0941 - CVSS 7.5 (high), 2003-12-15: web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to…
- CVE-2003-0944 - CVSS 7.5 (high), 2003-12-15: Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long…
- CVE-2003-0265 - CVSS 6.2 (medium), 2003-05-27: Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows…
