CVE-2006-2547 | BDVDB-2026-17074 Detail
Description#
Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2006/1861
- http://secunia.com/advisories/20180
- http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Local_Privilege_Escalation_in_SAP_sapdba_Command.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26526
- http://securitytracker.com/id?1016122
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html
- http://www.securityfocus.com/archive/1/434534/30/4890/threaded
- http://securityreason.com/securityalert/941
- http://www.securityfocus.com/bid/18028
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.