CVE-2003-0265 Information

Description

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

Reference

http://marc.info/?l=bugtraq&m=105232424810097&w=2 http://www.securityfocus.com/bid/7421

Share on: