CVEvulnerability
CVE-2008-0307
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
Affected configurations
• sap maxdb 7.6.0.37
Related
Weakness · not in database (1)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669 labs.idefense.com
- http://secunia.com/advisories/29312 Vendor Advisory
- http://www.securityfocus.com/bid/28183 www.securityfocus.com
- http://www.securitytracker.com/id?1019571 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0844/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41107 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669 labs.idefense.com
- http://secunia.com/advisories/29312 Vendor Advisory
- http://www.securityfocus.com/bid/28183 www.securityfocus.com
- http://www.securitytracker.com/id?1019571 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0844/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41107 exchange.xforce.ibmcloud.com