CVE-2002-1576 | BDVDB-2026-6164 Detail

Description#

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12004-03-16Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.