CVE-2001-0366 | BDVDB-2026-3492 Detail

Description#

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/2662
https://exchange.xforce.ibmcloud.com/vulnerabilities/6487
http://www.securityfocus.com/archive/1/180498

Exploit#

No public exploit known

History#

Version 12002-03-09Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.