CVEvulnerability

CVE-2003-0265

6.2 MEDIUM Published 2003-05-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-05-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.

Affected configurations

• sap sap db 7.3.29 • sap sap db 7.4.3.7 beta

Related

Referenced by CWE · observed example (1)

  • CWE-689 Permission Race Condition During Resource Copy weakness

References