NVD

Id
74105  
Name
CVE-2003-1033  
Description
The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-04-15  
Modified Date
2017-07-10  
Seq
2003-1033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
381039 74105 CVE-2003-1033 [SAP DB Dev] 20030422 Security Alert: Development Tools  View
381040 74105 CVE-2003-1033 20030422 SRT2003-04-22-1336 - SAP DB Development Tools install flaw  View
381041 74105 CVE-2003-1033 7407  View
381042 74105 CVE-2003-1033 7408  View
381043 74105 CVE-2003-1033 sap-db-gain-privileges(11842)  View

Related JVN