CVE-2003-0943 Information

Description

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho (2) Web SQL Interface (websql) or (3) Web Database Manager (webdbm).

Reference

http://www.atstake.com/research/advisories/2003/a111703-2.txt

Share on: