Vulnerabilities > SAP
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-05-27 | CVE-2003-0265 | Unspecified vulnerability in SAP DB 7.3.29/7.4.3.7Beta Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed. | 6.2 |
| 2001-06-27 | CVE-2001-0366 | Unspecified vulnerability in SAP R 3 web Application Server Demo and Saposcol saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program. | 7.2 |