CVE-2008-0306 sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
MediumCVSS 6.9
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap maxdb | = 7.6.0.37 | No fix listed |
References
- 20080310 SAP MaxDB sdbstarter Privilege Escalation Vulnerability third-party-advisory
- 29312 third-party-advisory vendor-advisory
- 28185 vdb-entry
- 1019570 vdb-entry
- ADV-2008-0844 vdb-entry
- maxdb-sdbstarter-privilege-escalation(41104) vdb-entry