CVEvulnerability
CVE-2006-2547
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling.
Affected configurations
• sap sapdba
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html Patch
- http://secunia.com/advisories/20180 Vendor Advisory
- http://securityreason.com/securityalert/941 securityreason.com
- http://securitytracker.com/id?1016122 securitytracker.com
- http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf Patch
- http://www.securityfocus.com/archive/1/434534/30/4890/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18028 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1861 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26526 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html Patch
- http://secunia.com/advisories/20180 Vendor Advisory
- http://securityreason.com/securityalert/941 securityreason.com
- http://securitytracker.com/id?1016122 securitytracker.com
- http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf Patch
- http://www.securityfocus.com/archive/1/434534/30/4890/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18028 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1861 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26526 exchange.xforce.ibmcloud.com