Description
Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.
References
- ADV-2008-2267 vdb-entry
- 31318 third-party-advisory
- 30474 vdb-entry
- 20080730 SAP MaxDB dbmsrv Untrusted Execution Path Vulnerability third-party-advisory
- 1020585 vdb-entry
- maxdb-dbmsrv-code-execution(44125) vdb-entry