GCVE - cpe:2.3:a:sap:sap_db:7.3.00:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:sap_db:7.3.00:*:*:*:*:*:*:*

part: a version: 7.3.00 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Sap Db (`e843cfaa-7fef-51d8-b4dc-b3249da584ee`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3614`	vulnerable	2026-06-08 04:49:54.303035	Details available Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other unspecified vectors related to "numerous other fields." Published: 2007-07-06T19:00:00.000Z Updated: 2024-08-07T14:21:36.481Z Open on db.gcve.eu Reference links http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow/ http://www.securitytracker.com/id?1018341 https://exchange.xforce.ibmcloud.com/vulnerabilities/35277 http://www.securityfocus.com/bid/24773 http://osvdb.org/37838	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1034`	not_vulnerable	2026-06-08 04:47:23.207100	Details available The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs. Published: 2004-03-16T05:00:00.000Z Updated: 2024-08-08T02:12:35.909Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/11669 http://www.securityfocus.com/bid/7242 http://marc.info/?l=bugtraq&m=104914778303805&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1033`	vulnerable	2026-06-08 04:47:23.206029	Details available The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program. Published: 2004-03-16T05:00:00.000Z Updated: 2024-08-08T02:12:36.007Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/11842 http://www.securityfocus.com/bid/7407 http://listserv.sap.com/pipermail/sapdb.sources/2003-April/000143.html http://www.securityfocus.com/bid/7408 http://marc.info/?l=bugtraq&m=105103613727471&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1576`	vulnerable	2026-06-08 04:46:24.044345	Details available lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program. Published: 2004-03-16T05:00:00.000Z Updated: 2024-08-08T03:26:29.328Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10762 http://www.securityfocus.com/bid/6316 http://www.sapdb.org/sap_db_alert.htm http://marc.info/?l=bugtraq&m=103903565829796&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.