Description
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
References
- 1019570 vdb-entry
- ADV-2008-0844 vdb-entry
- maxdb-sdbstarter-privilege-escalation(41104) vdb-entry
- 20080310 SAP MaxDB sdbstarter Privilege Escalation Vulnerability third-party-advisory
- 29312 third-party-advisory
- 28185 vdb-entry