CVE-2008-1810 Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.
MediumCVSS 4.4
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap maxdb | = 7.6.03.15 | No fix listed |
References
- 20080730 SAP MaxDB dbmsrv Untrusted Execution Path Vulnerability third-party-advisory
- 31318 third-party-advisory
- 30474 vdb-entry
- 1020585 vdb-entry
- ADV-2008-2267 vdb-entry
- maxdb-dbmsrv-code-execution(44125) vdb-entry