Lucene search

[email protected]NVD:CVE-2003-0939

HistoryDec 15, 2003 - 5:00 a.m.

CVE-2003-0939

2003-12-1505:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.017

Percentile

87.9%

JSON

eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents the server from NULL terminating the string and leads to a buffer overflow.

Affected configurations

Nvd

Node

sapsap_dbRange≤7.4.03.27

VendorProductVersionCPE
sapsap_db*cpe:2.3:a:sap:sap_db:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	sap_db	*	cpe:2.3:a:sap:sap_db::::::::

References

www.atstake.com/research/advisories/2003/a111703-1.txt

www.sapdb.org/7.4/new_relinfo.txt

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.017

Percentile

87.9%

JSON

Related for NVD:CVE-2003-0939

cve1 cvelist1 securityvulns1