Vulnerability Description
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Sap Db | 7.3.00 |
References
- http://marc.info/?l=bugtraq&m=103903565829796&w=2
- http://www.sapdb.org/sap_db_alert.htmPatch
- http://www.securityfocus.com/bid/6316ExploitPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10762
- http://marc.info/?l=bugtraq&m=103903565829796&w=2
- http://www.sapdb.org/sap_db_alert.htmPatch
- http://www.securityfocus.com/bid/6316ExploitPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10762
FAQ
What is CVE-2002-1576?
CVE-2002-1576 is a vulnerability with a CVSS score of 7.2 (HIGH). lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called ...
How severe is CVE-2002-1576?
CVE-2002-1576 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1576?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Sap Db.