Description
The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.
References
- sap-db-world-writable(11669) vdb-entry
- 7242 vdb-entry
- 20030331 SRT2003-03-31-1219 - SAP world writable server binaries mailing-list