VulnerabilityModified
CVE-2008-0306
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
MEDIUM 6.9EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.37% probability · 31th percentile
- CISA KEV
- Not listed
- Affected
- sap/maxdb
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
- http://secunia.com/advisories/29312Vendor Advisory
- http://www.securityfocus.com/bid/28185
- http://www.securitytracker.com/id?1019570
- http://www.vupen.com/english/advisories/2008/0844/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41104
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670
- http://secunia.com/advisories/29312Vendor Advisory
- http://www.securityfocus.com/bid/28185
- http://www.securitytracker.com/id?1019570
- http://www.vupen.com/english/advisories/2008/0844/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41104
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.